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Abstract 
O . 

D ■ We study arithmetic proof systems Pc(]F) and F/(F) operating with arithmetic circuits 

I and arithmetic formulas, respectively, that prove polynomial identities over a field F. We 

i establish a scries of structural theorems about these proof systems, the main one stating 

psj ' that Pc(F) proofs can be balanced: if a polynomial identity of syntactic degree d and depth 

k has a Pc(F) proof of size s, then it also has a Pc(F) proof of size po\y{s,d) and depth 
0(fc + log^ d + log d ■ log s). As a corollary, we obtain a quasipolynomial simulation of Pc(F) 
by P/(F), for identities of a polynomial syntactic degree. 

Using these results we obtain the following: consider the identities 
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det(Ay) = det(A) • det(r) and det(Z) = zn • • • z„„. 



where X, Y and Z are nxn square matrices and ^ is a triangular matrix with zn , . . . , z„„ on 
J> ' the diagonal (and det is the determinant polynomial) . Then we can construct a polynomial- 

. size arithmetic circuit det such that the above identities have Pc(F) proofs of polynomial-size 

' and 0(log^ n) depth. Moreover, there exists an arithmetic formula det of size such 

\^ . that the above identities have P/(F) proofs of size 

• ' This yields a solution to a long-standing open problem in propositional proof complexity, 

namely, whether there are polynomial-size NC^-Frege proofs for the determinant identities 
and the hard matrix identities, as considered, e.g. in Soltys and Cook [SC04] (cf., Beame and 
Pitassi [BP98]). We show that matrix identities like AB = / — !> BA = I (for matrices over 
the two element field) as well as basic properties of the determinant have polynomial-size 
NC^-Frcge proofs, and quasipolynomial-size Frege proofs. 

X 

- - ■ 1 Introduction 

The field of proof complexity is dominated by the question of how hard is it to prove propositional 
tautologies. For weak proof systems, such as resolution, many hardness results are known (cf., 
[Seg07] for a recent technical survey), but for strong propositional proof systems like Frege or 
extended Frege the question remains completely open. In this paper we continue to investigate 
a different but related problem: how hard is it to prove polynomial identities? For this purpose, 
various systems for proving polynomial identities were introduced in [HT09]. The main feature 
of these systems is that they manipulate arithmetic equations of the form F = G, where F, G 
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are arithmetic formulas over a given field. Such equations are manipulated by means of simple 
syntactic rules, in such a way that F = G has a proof if and only if F and G compute the same 
polynomial. The central question in this framework is the following: 

What is the length of such proofs, namely, does every true polynomial equation have 
a short proof, or are there hard equations that require extremely long proofs? 

In this paper, we focus on two arithmetic equational proof systems (arithmetic proofs systems, for 
short) for proving polynomial identities: P/ and Pc. The former system was introduced in [HT09] 
and the latter is an extension of it. The difference between the two systems is that P/ operates 
with arithmetic formulas, whereas Pc operates with arithmetic circuits — this is analogous to the 
distinction between Frege and extended Frege proof systems (Frege and extended Frege proofs 
are propositional proof systems establishing propositional tautologies, essentially operating with 
boolean formulas and circuits, respectively). 

The study of proofs of polynomial identities is motivated by at least two reasons. First, as 
a study of the Polynomial Identity Testing (PIT) problem. As a decision problem, polynomial 
identity testing can be solved by an efficient randomized algorithm [SchSO, Zip79], but no efficient 
deterministic algorithm is known. In fact, it is not even known whether there is a polynomial 
time non-deterministic algorithm or, equivalently, whether PIT is in NP. A proof system such as 
Pc can be interpreted as a specific non-deterministic algorithm for PIT: in order to verify that an 
arithmetic formula F computes the zero polynomial, it is sufficient to guess a proof of F = in 
Pc. Hence, if every true equality has a polynomial-size proof then PIT is in NP. Conversely, Pj 
and Pc systems capture the common syntactic procedures used to establish equality of algebraic 
expressions. Thus, showing the existence of identities that require superpolynomial arithmetic 
proofs would imply that those syntactic procedures are not enough to solve PIT efficiently. 

The second motivation comes from propositional proof complexity. The systems P/ and Pc 
are in fact restricted versions of their propositional counterparts, Frege and extended Frege, 
respectively (when operating over GF{2)). One may hope that the study of the former would 
help to understand the latter. Arithmetic proof systems have the advantage that they work with 
arithmetic circuits. The structure of arithmetic circuits is perhaps better understood than the 
structure of their Boolean counterparts, or at least is different, allowing one to employ different 
techniques and possibly fresh perspectives. 

In order to understand the strength of the systems P/ and Pc, as well as their relative strength, 
we investigate quite a specific question, namely, how hard is it to prove basic properties of the 
determinant? In other words, we investigate lengths of proofs of identities such as det{AB) = 
det(^) •det(i?), or the cofactor expansion of the determinant. We show that such identities have 
polynomial-size Pc proofs of depth O(log'^n) and quasipolynomial size P/ proofs (both results 
hold over any field). ^ 

The determinant polynomial has a central role in both linear algebra and arithmetic cir- 
cuit complexity. Therefore, an immediate motivation for our inquiry is to understand whether 
arithmetic proof systems are strong enough to reason efficiently about the determinant. More 
importantly, we take the determinant question as a pretext to present several structural prop- 
erties of Pc and Pj. A large part of this work is not concerned with the determinant at all, 
but is rather a series of general theorems showing how classical results in arithmetic circuit 
complexity can be translated to the setting of arithmetic proofs. We thus show how to capture 
efficiently in our proof systems the following results: (i) homogenization of arithmetic circuits 

^The parameter n is the dimension of the matrices A,B, and quasipolynomial size means size n'^^^°^"K 
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(implicit in [Str73]); (ii) Strassen's technique for eliminating division gates over large enough 
fields (also in [Str73]); (iii) eliminating division gates over small fields — this is done by simulat- 
ing large fields in small ones; and (iv) balancing arithmetic circuits (Valiant et al. [VSBR83]; 
see also [Hya79]). Most notably, the latter result gives a collapse of polynomial-size Pc proofs 
to polynomial-size 0(log^ n)-depth Pc proofs (for proving identities of polynomial syntactic de- 
grees) and a quasipolynomial simulation of Pc by Pj. This is one important point where the 
arithmetic systems differ from Frege and extended Frege, for which no non-trivial simulation is 
known. 

Furthermore, the proof complexity of linear algebra attracted a lot of attention in the 
past. This was motivated, in part, by the goal of separating the propositional proof sys- 
tems Frege and extended Frege. A classical example, originally proposed by Cook and Rack- 
off (cf., [BP98, SC04, SU04, SolOl, Sol05]), is the so called inversion principle asserting that 
AB = / — 7> BA = I. When A,B are n x n matrices over GF{2), the inversion principle is a 
collection of propositional tautologies. Soltys and Cook [SC04, SolOl] showed that the principle 
has polynomial size extended Frege proofs. On the other hand, no feasible Frege proof is known, 
and hence the inversion principle is a candidate for separating the two proof systems. Other 
candidates, including several based on linear algebra, were presented by Buss et al. [BBP95]. 
The inversion principle is one of the "hard matrix identities" explored in [SC04]. Inside Frege, 
the hard matrix identities have feasible proofs from one another, and they have short proofs 
from the aforementioned determinant identities. This connection between the hard matrix iden- 
tities and the determinant identities serves as an evidence for the conjecture that hard matrix 
identities require superpolynomial Frege proofs: it seems that every Frege proof must construct 
in some sense the determinant, which is believed to require a superpolynomial-size formula. 

A related question is whether the hard matrix identities and the determinant identities have 
polynomial-size NC^-Frege proofs^. This was conjectured in, e.g., [BBP95], based on the intu- 
ition that the determinant is NC^ computable, and so by the analogy between circuit classes and 
proofs, it is natural to assume that the determinant properties are efficiently provable in NC^- 
Frege. Again, a polynomial-size extended Frege proofs of the determinant identities have been 
constructed in [SC04]. Whether these identities have polynomial-size NC^-Frege proofs (and 
hence, quasipolynomial-size Frege proofs) remained open. In this paper, we positively answer 
this question: we show that over GF{2), the hard hard matrix identities and the determinant 
identities have polynomial-size NC^-Frege proofs. This is a simple corollary of the results on 
arithmetic proof systems. Over the two element field, an 0(log^ n)-depth Pc proof is formally 
also NC^-Frege proof^. Thus, if determinant identities like det(^-B) = det(A) • det{B) have 
polynomial-size Pc(GF(2)) proofs with depth O(log^n), then the corresponding propositional 
tautologies have polynomial-size NC^-Frege proofs. 

Let us remark that one can also consider propositional translations of the determinant iden- 
tities (and the hard matrix identities) over different finite fields or even the rationals. We do 
not explicitly study these translations, but there is no apparent obstacle to extending the result 
to these cases. 

To understand our construction of short arithmetic proofs for the determinant identities, 
let us consider the following example. In [Ber84], Berkowitz constructed a quasipolynomial 
size arithmetic formula for the determinant. He used a clever combinatorial argument designed 
specifically for the determinant function. However, one can build such a formula in a completely 

^That is, polynomial size proofs using circuits of 0(log^ n) depth 

^When + and ■ modulo 2 are interpreted as Boolean connectives and = is interpreted as logical equivalence. 
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oblivious way: first compute the determinant by, say, Gaussian elimination algorithm. This 
gives an arithmetic circuit with division gates. Second, show that any circuit with division gates 
computing a polynomial can be efficiently simulated by a division-free circuit [Str73], and finally, 
show that any arithmetic circuit of a polynomial degree can be transformed to an O(log^n)- 
depth circuit computing the same polynomial, with only a polynomial increase in size [VSBR83] 
(or to a formula with at most a quasipolynomial increase in size [Hya79]). This paper follows a 
similar strategy, but in the proof-theoretic framework. 

It should be stressed that in full generality, the structural theorems about Pc and cannot 
be reproduced for propositional Frege and extended Frege systems. As already mentioned, no 
non-trivial simulation between Frege and extended Frege is known, and the other theorems are 
difficult to even formulate in the Boolean context. This also illustrates one final point: in order 
to construct a Frege proof of a tautology T, it may be useful to interpret T as a polynomial 
identity and prove it in some of the — weaker but better structured — arithmetic proof systems. 

1.1 Arithmetic proofs with circuits and formulas 

Before presenting and explaining the main results of this paper (in Section 2), we need to 
introduce our basic arithmetic proof systems. 

Arithmetic circuits and formulas. Let F be a field. An arithmetic circuit F is a finite 
directed acyclic graph as follows. Nodes (or gates) of in-degree zero are labeled by either a 
variable or a field element in F. All the other nodes have in-degree two and they are labeled by 
either -|- or x . Unless stated otherwise, we assume that F has exactly one node of out-degree 
zero, called the output node, and that moreover the two edges going into a gate v labeled by x or 
+ are labeled by left and right. This is to determine the order of addition and multiplication^. 
An arithmetic circuit is called a formula, if the out-degree of each node in it is one (and so the 
underlying graph is a directed tree). The size of a circuit is the number of nodes in it, and 
the depth of a circuit is the length of the longest directed path in it. Arithmetic circuits and 
formulas will be referred to simply as circuits and formulas. 

For a circuit F and a node u in F, Fu denotes the subcircuit of F with output node u. If 
F, G are circuits then 

F®G and F(g)G 

abbreviate any circuit H whose output node \s u + v and u ■ v, respectively, where Hu = F and 
H^, = G. Further, F + G and F ■ G abbreviate the unique circuit of the form F(BG and FCSiG, 
respectively, such that there is no edge going from a node in to a node in G or vice versa. 

A circuit F computes a polynomial F with coefficients from F in the obvious manner. That 
is, if F consists of a single node labeled with z, a variable or an element of F, we have F := z. 
Otherwise, F is either of the form G®H or G^H, and we let F := G + H or F = G ■ H, 
respectively. 

The system P/(F) 

We now define two proof systems for deriving polynomial identities. The systems manipulate 
arithmetic equations, that is, expressions of the form F = G. In the case of P/(F), F,G are 
formulas, and in the case of Pc(F), F, G are circuits (see [HT09] for similar proof systems). 

^Although ultimately, addition and multiplication are commutative. 
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Let F be a field. The system Pj(F) proves equations of the form F = G, where F,G are 
formulas over F. The inference rules are: 

R1 ^ = ^ R2 ^ = g G = H 

„ -Fi = Gi Fo = Go „ . F-i = G^ Fo = Go 

R3 :^ -A T:r^ R4 i i ^ - 



Fi + F2 — Gi + G2 Fi • F2 — Gi • G2 

The axioms are equations of the following form, with F, G, H formulas: 
Al F = F 

A2 F + G = G + F A3 F + {G + H) = {F + G) + H 

A4 F-G = G-F, A5 F ■ {G ■ H) = {F ■ G) ■ H 

A6 F-{G + H) = F-G + F-H 
A7 F + = F A8 F-0 = 

A9 a = b + c,a' = b' ■ c' , if a, 6, c, a', 6', c' G F, are such that 

the equations hold in F. 
The rules and axioms can be divided into two groups. The rules R1-R4 and axiom Al 
determine the logical properties of equality "=", and axioms A2-A9 assert that polynomials 
form a commutative ring over F. 

A proof S in Pj(F) is a sequence of equations Fi = Gi, F2 = G2, ■ ■ ■ , F/^ = G^, with Fi, Gi 
formulas, such that every equation is either an axiom A1-A9, or was obtained from previous 
equations by one of the rules R1-R4. An equation Fi = Gi appearing in a proof is also called a 
proof line. We consider two measures of complexity for S: the size of S is the sum of the sizes 
of Fi and Gi, i G [k], and the number of proof lines in S is k. (Throughout the paper, [k] 
stands for {1, . . . , k}.) 

The system Pc(F) 

The system Pc(lF) differs from Pj(F) in that it manipulates equations with circuits. Pc(F) has 
the same rules R1-R4 and axioms A1-A9 as P/(F), but with F, G, H, Fi, F2,Gi, G2 ranging over 
circuits, augmented with the following two axioms: 

CI Fi(BF2 = Fi + F2 C2 F1OF2 = Fi • F2. 

A proof in Pc(F) is a sequence of equations Fi = Gi, . . . , F/^. = G^, where Fi, Gi are circuits, 
and every equation is either an axiom or was derived by one of the rules. Similar to P/(F), the 
size of a proof is the sum of the sizes of all the circuits Fi and Gi, i (z [k], and the number of 
proof lines of the proof is k. The depth of a Pc(F) proof is the maximal depth of a circuit 
appearing in the proof. 

The first thing to note about the two proof systems Pc(F) and P/(F) is that they are sound 
and complete with respect to polynomial identities: the systems prove an equation F = G if 
and only if F, G compute the same polynomial (cf., [HT09]): 

Proposition 1. Let ¥ be a field. 

(i) For any pair F, G of arithmetic circuits, Pj(F) proves F = G iff F = G. 

(a) For any pair F, G of arithmetic circuits, Pc(F) proves F = G iff F = G. 

For simplicity, we sometimes suppress the explicit dependence on the field F in Pc and P/, 
if the relevant statement holds over any field. 
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Comments on the proof systems. The system Pc is an algebraic analogue of the propo- 
sitional proof system circuit Frege (CF). Circuit Frege is polynomially equivalent to the more 
well-known extended Frege system (EF) (see [Kra95, Jef04]). Following this analogy, one can 
define an extended ¥f proof system, EPj, as follows: an EPj proof is a P/ proof in which through- 
out the proof we are allowed to introduce new "extension" variables zi,Z2, ■ ■ ■ via the axiom 
Zi = F, for any formula F, such that: (i) the variable Zj appears in neither F nor in previous 
proof-lines; and (ii) the last equation in the proof contains no zi,Z2, ■ ■ ■ extension variables. 

The following is completely analogous to the propositional case (see [Kra95, Jef04]; compare 
with Lemma 30): 

Proposition 2. 

(i) The systems Pc and EPj polynomially simulate each other. More exactly, there is a poly- 
nomial p such that for every pair of formulas F,G, if F = G has a Pc proof of size s then 
it has an E¥f proof of size p{s), and if F = G has an EPj proof of size s then it has a Pc 
proof of size p{s). 

(ii) If F and G are circuits of size s and F = G has a Pc proof with k proof lines then F = G 
has a Pc proof of size poly(s, k). 

The second part of this statement is especially useful, because it is often easier to estimate 
the number of lines in a proof rather than its size. 

An alternative, polynomially equivalent, definition for Pc can be given as follows: 

Definition 1. For a circuit F, define F' as the unfolding of F into a formula. That is, F* := F , 
if F is a leaf and {G®H)' := G' + H', (G^H)' := G* ■ H\ We say that F and G are similar 
circuits, if F' is the same formula as G' . Then the alternative proof system is defined so that 
Al, CI, C2 are replaced by the following single axiom: 

Al' F = G, whenever F and G are similar. 

The axiom Al' can be proved from Al, CI, C2 by a polynomial-size proof, and vice versa. 

Notation for matrices inside proofs. Before presenting our results, we need to set how 
matrices are represented inside proofs. In this paper, matrices are understood as matrices whose 
entries are circuits and operations on matrices are operations on circuits. Let F = {-Fjjjj jg[„] 
be an n X n matrix whose entries are circuits Fij; and similarly G = {Cjjjj jg[„]. Addition 
and multiplication of matrices are defined in the obvious way, as follows. Let {F -\- G)ij denote 
Fij + Gij, then F + G is the matrix {{F + For multiplication, let {F ■ G)ij denote 

'Yl'^=i ^ip ' Gpj, then F ■ G is the matrix {{F ■ G)ij}j jg[„], and aF is the matrix {a ■ 
where a is a circuit with a single node. 

An equation F = G between two nxn matrices denotes the set of equations Fij = Gij, i,j G 

N- 

2 Overview of results and techniques 
2.1 Main theorem 

It is well known that the determinant can be uniquely characterized as the function that satisfies 
the following two identities for any pair of nxn matrices X, Y and any (upper or lower) triangular 
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matrix Z with zn, . . . 



Znn on the diagonal: 



det(X-y) = det(X) •det(y) 

det(Z) = Zll • • • Znn- 



(1) 
(2) 



Moreover, other properties of the determinant, such as the cofactor expansion, easily follow from 
(1) and (2). 

The main goal of this paper is to prove the following theorem: 

Theorem 3 (Main theorem). For any field ¥: 

(i) There exists a circuit det such that (1) and (2) have polynomial- size Pc(IF) proofs. More- 
over, every^ circuit in the proof has depth at most 0(log^(n)). 

(a) There exists a formula det such that (1) and (2) have Ff{¥) proofs of size n'~'^^°^^\ 

As mentioned before, a large part of the construction is not related directly to the de- 
terminant. It is rather a series of structural theorems about the systems ¥f and ¥c- These 
are obtained by reproducing classical results in arithmetic circuit complexity in the setting of 
arithmetic proofs (for a recent survey on arithmetic circuit complexity see [SYIO]). The most 
important of those results is showing that Pc proofs can be balanced, in the sense that Pc proofs 
of size s (of polynomially bounded syntactic degree equations) can be polynomially simulated 
by Pc proofs in which each circuit has depth 0(log^ s). 

2.2 Balancing Pc proofs and simulating Pc by P/ 

In the seminal paper [VSBR83], Valiant et al. showed that if a polynomial / of degree d can 
be computed by an arithmetic circuit of size s, then / can be computed by a circuit of size 
poly(s, d) and depth 0(log s log d + log^ d). This is a strengthening of an earlier result by Hyafil 
[Hya79], showing that / can be computed by a formula of size (s(d+ l))'^('°g'^). We will show 
that those results can be efficiently simulated within the framework of arithmetic proofs. 

Instead of the degree of a polynomial, we focus on the syntactic degree of a circuit. Let F 
be an arithmetic circuit. The syntactic degree of F, degF, is defined as follows: 

(i) If F is a field element or a variable, then deg-F = and degF = 1, respectively; 

(n) deg(FeG) = max(deg F, deg G), and deg(F®G) = degF + degG. 

The syntactic degree of an equation F = G is max(degF, degG), and the syntactic degree of a 
proof S is the maximum of the syntactic degrees of equations in 5. If F is a circuit and u is a 
node in F we also write deg(f) to denote degF^. 

In accordance with [VSBR83], we will construct a map [•] that maps any given circuit F of 
size s and syntactic degree d to a circuit [F] computing the same polynomial, such that [F] has 
size poly(s, d) and depth 0(log s log d + log^ d). We will show the following: 

Theorem 4. Let F, G be circuits of syntactic degree at most d such that F = G has a Pc proof 
of size s. Then: 

(i) The equation [F] = [G] has a Pc proof of size poly(s, d) and depth 0(log s ■ log d + log^ d) . 

We assume that the product 211 •• ■ Znn in (2) is written as a formula of deptli O(logn). 
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(ii) If F,G have depth at most k then F = G has a Pc proof of size poly(s,d) and depth 
0{k + logs • logd + log^ d). 

We also obtain the following simulation of Pc by P/: 

Theorem 5. Assume that F, G are formulas of syntactic degree < d such that F = G has a Pc 
proof of size s. Then F = G has aFf proof of size {s{d + l))0{iogd) < gOi^ogs)^ 

This simulation is polynomial if F and G have a constant syntactic degree. Let us emphasize 
that the syntactic degree of a formula of size s is at most s, and hence the simulation is at most 
quasipolynomial. 

Homogenization and degree bound in arithmetic proofs. One ingredient of Theorems 
4 and 5 is to show that using circuits of high syntactic degree cannot significantly shorten Pc 
proofs. That is, if we want to prove an equation of syntactic degree d, we can without loss of 
generality use only circuits of syntactic degree at most d. This result is the proof-theoretic analog 
of a result by Strassen, who showed how to separate arithmetic circuits into their homogeneous 
parts (implicit in [Str73]). 

We say that a circuit F is syntactically homogeneous, if for every sum-gate ui + n2 in F we 
have deg(ui) = deg(it2). For a circuit F and a number k, we introduce a circuit F^^^ which 
computes the syntactically /c-homogeneous part of F (see Section 3 for the definition). The 
syntactic degree of a Pc proof is the maximal syntactic degree of a circuit appearing in it. We 
show the following: 

Proposition 6. Let F,G be a pair of circuits with syntactic degree at most d. Assume that 
F = G has a Pc proof of size s. Then 

(i) f(^) = G(^) has a Pc proof of size s ■ poly(fc) and syntactic degree at most k, for any 
k = 0,...,d. 

(ii) The identity F = G has a Pc proof of syntactic degree at most d and size s ■ poly((i). 
2.3 Circuits and proofs with division 

We denote by F{X) the field of formal rational functions in the variables X over the field F. It 
is convenient to extend the notion of a circuit so that it computes rational functions in ¥{X). 
This is done in the following way: a circuit with division F is a circuit that may contain an 
additional type of gate with fan-in 1, called an inverse or a division gate, denoted (•)~^. If a node 
V computes the rational function /, then computes the rational function 1//. Moreover, we 
require that for every division node in F, v does not compute the zero rational function. If 
no division gate computes the zero rational function we say that F is defined, and otherwise, we 
say that F is undefined. One should note, for instance, that the circuit with division (x^ + x)~^ 
over GF{2) is defined, since x'^ + x is not the zero rational function (although it vanishes as a 
function over GF{2)). 

We define the system P~^(F), operating with equations F = G for F and G circuits with 
division computing rational functions in ¥{X). First, we extend the axioms of Pc(F) to apply 
to circuits with division, by adding the following axiom, denoted D: 

D F-F"^ = l, 

provided that F~^ is defined. 
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Remark 7. The system ""^(F) polynomially simulates the rule 

F = G 



Moreover, the identities {F ^) ^ = F and {F ■ G) ^ = G ^ ■ F ^ have linear size proofs in 
P-I(F). 

As before, we sometimes suppress the explicit dependence on the field in P~^(F) if the 
relevant statement is field independent. 

Strassen [Str73] showed that division gates can be eliminated from arithmetic circuits com- 
puting polynomials over large enough fields, with only a polynomial increase in size. We will 
show the proof-theoretic analog of Strassen's result over arbitrary fields, namely that Pc(F) 
polynomially simulates P~"^(F) for any field F: 

Theorem 8. Let F be any field and assume that F and G are circuits without division gates 
such that degF, degG < d. Suppose that F = G has a P~-^(F) proof of size s. Then F = G has 
a Pc(F) proof of size s ■ poly((i). 

A corollary of Theorem 8 is that Pc(F) polynomially simulates the rule 



F = 

(where the syntactic degree of G is polynomially bounded). 

To prove Theorem 8 we first assume that the underlying field F has an exponential size. 
Under this assumption, we cannot eliminate division gates in GF{2) which is, from the Boolean 
proof complexity viewpoint, the most interesting field. To deal with small fields and specifically 
GF{2) we have to show how to simulate large fields in small ones, as we explain in what follows. 



Simulating large fields in small fields. The idea behind simulating large fields in small 
ones is to treat the elements of GF[2^) as k x k matrices over GF{2). This enables one to 
simulate computations and proofs over GF{2^) by those over GF{2). We prove the following: 

Theorem 9. Let p be a prime power and n a natural number and let F, G be circuits over 
GF{p). Assume that F = G has a Pc(GF(p")) proof of size s. Then F = G has a ¥c{GF{p)) 
proof of size s ■ poly(?7,). 



2.4 The determinant as a rational function and as a polynomial 

To prove the main theorem (Theorem 3) one needs to construct a circuit (and a formula) 
for the determinant polynomial that can be used efficiently inside arithmetic proofs. We first 
show how to compute the determinant as a rational function, using a circuit with division, 
denoted DET(X). It is possible to construct DET(X) in a way that P~^ admits short proofs 
for the properties of DET(X). However, we cannot yet conclude Theorem 3 which speaks about 
(division- free) Pc proofs (it is also worth mentioning that, at this stage of the argument, we are 
still unable to conclude the short NC^-Frege proofs for the determinant identities, because P~^ 
proofs do not correspond directly to propositional Frege proofs). To be able to consider Pc proofs 
we first need to eliminate division gates from our P~^ proofs; but Theorem 8 enables one to 
eliminate division gates in P~^ proofs only if the equations proved are themselves division- free. 
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To solve the problem above we construct a division-free circuit det{X), computing the de- 
terminant as a polynomial. Assuming we can prove efficiently in F'^ that det{X) = DET(X), 
we are done, since now we can eliminate division gates from proofs of division-free equa- 
tions, using Theorem 8. To this end, we define the det(X) polynomial as the nth term of the 
Taylor expansion of DET(/ -|- zX) at z = 0. This enables us to demonstrate short proofs of 
det{X) = DET(X), which concludes the argument. 

2.5 Applications 

In [Val79], Valiant showed that every formula of size s can be written as a projection of a 
determinant of a matrix of a linear dimension. We can conclude that this holds feasibly already 
in Pc: 

Proposition 10. Let F be a formula of size s. Then there exists a matrix M of dimension 
2s X 2s whose entries are variables or elements o/F such that the identity 

F = det(M) 

has a polynomial- size 0{\o^ s)- depth Pc(F) proof (and hence also a quasipolynomial-size P/(F) 
proof where det is the formula from Theorem 3). 

In this paper we are mainly interested in proofs with no assumptions other than the axioms 
A1-A9. Nevertheless, we can introduce the notion of a proof from assumptions as follows: let S 
be a set of equations. Then a Pc proof from the assumptions 5 is a proof that can use equations in 
S as additional axioms (and similarly for Pj proofs from assumptions). Proofs from assumptions 
are far less well-behaved than proofs without assumptions. For instance, neither Theorem 5 nor 
Theorem 8 hold for proofs from a general nonempty set S of assumptions. We now give an 
important example of a proof from assumptions. 

Given a pair of n x n matrices X,Y, recall that the expressions XY = I and YX = I, are 
abbreviations for the list of equalities between the appropriate entries. 

Proposition 11. Let F be any field. The equations YX = I have polynomial- size and 
0{\o^ n)- depth Pc(F) proofs from the equations XY = I. In the case of¥f{¥), the proof 
has a quasipolynomial-size. 

Determinant identities in NC^-Frege and Prege systems. When considering the field F 
to be GF{2), there is a close connection between our proof systems and the standard proposi- 
tional proof systems. Consider the propositional proof systems Frege (F), extended Frege (EF) 
and circuit Frege (CF). For the definitions of Frege and extended Frege see [Kra95] and for the 
definition of circuit Frege see [Jef04], where it is also shown that CF and EF are polynomially 
equivalent. 

For simplicity, we shall assume that F, EF and CF are all in a Boolean basis that contains 
-f , • (addition and multiplication modulo 2, respectively), and the logical equivalence =. Then 
every arithmetic circuit is automatically also a Boolean circuit, and an equality like G = H 
can be considered as the logical equivalence G = H. Therefore, F f[GF{2)) and Tc{GF{2)) can 
be considered as fragments of F and CF, respectively: the finite set of axioms and rules of 
F f{GF{2)) now serve as the finite set of (schematic) Frege axioms and rules, and similarly for 
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¥c{GF{2)). In fact, one can polynomially simulate the full F and CF systems by adding the 
following new axiom 

G^ = G 

to ¥f{GF{2)) and ¥c{GF{2)), respectively, where G is any formula, respectively, a circuit. 

This means that upper bounds in ¥f{GF{2)) and ¥c{GF{2)) are in fact upper bounds in F 
and CF (and hence also in EF), respectively. 

In what follows XY = I denotes the conjunction of formulas of the form (xj^i • yij + • • • + 
,jr) = ^ij, with 6ij — 1 if i — j and otherwise, where + and • modulo 2 are interpreted 
as Boolean connectives (and similarly for YX = I). We have the following: 

Theorem 12. 

(i). The properties of the determinant (over GF[2)) as in Theorem 3 (interpreted as Boolean 
tautologies) have polynomial- size circuit Frege proofs, with every circuit of depth at most 
O(log^n). In the case of Frege, the proofs have quasipolynomial-size. 

(a). The implication {XY = I) ^ {YX = I) has polynomial- size circuit Frege proofs, with 
every circuit of depth at most O(log^n), and quasipolynomial-size Frege proofs. 

Proof. Item (i) is a direct consequence of Theorem 3 and Item (ii) is a direct consequence of 
Proposition 11, both using the fact that proofs in ¥c{GF[2)) and P/(GF(2)) can be interpreted 
as proofs in circuit Frege and Frege, respectively. QED 

A family of polynomial-size CF proofs in which every proof- line G is of depth 0(log^ \G\), is 
also called an NC^-Frege proof. Hence, Theorem 12 states that NC^-Frege has polynomial-size 
proofs of the propositional tautologies [XY = I) ^ (YX = I). 

Theorem 12 thus settles an important open problem in proof complexity and feasible math- 
ematics, namely, whether basic properties of the determinant like det(^) • det(-B) = det{AB) 
and the cofactor expansion (see Proposition 37), as well as the hard matrix identities, have 
polynomial-size proofs in a proof system which corresponds to the circuit class NC^. 

Remark 13. We believe that Theorem 12 can he extended to any finite field or the field of 
rationals (after encoding field elements as Boolean strings). For finite fields, this is rather 
straightforward. In the rational case, one would have to show that the Pc(Q) proofs constructed 
in Theorem 3 involve only constants whose Boolean representation is polynomial. 



3 Homogenization and bounding the degree in Pc(F) proofs 

In this section we wish to construct the circuits F^^'^ computing the /c-homogeneous part of F 
and prove Proposition 6. First, let us say that a circuit F is non-redundant, if either F is the 
constant 0, or F does not contain the constant at all. Any circuit F can be transformed to a 
non-redundant circuit F^ as follows: successively replace all nodes of the form u + 0, + nbyu 
and w • 0, • u by 0, until no such replacement is possible. 

Let A; be a natural number. We define F'^^'^ as follows. For every node u in F, introduce 
k + 1 new nodes u^") , . . . , u^^'^ . 

(i). Assume u is a leaf. Then, u^^'^ := n, in case u is a. field element, and u^^'^ := u in case u is 
a variable, and u^*-* := otherwise. 
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(ii) . If u = m + U2, let ti^*^ := u^^ + tig \ for every i = 0, . . . ,k. 

(iii) . If u = ui • n2, let n« := E}=o^S^^ ' 

Finally, we define F^'^^ as the circuit G^, where G is the circuit with the output node w^''^ and 
w is the output node of F. 
Note the following: 

(1) has size 0{s{k + 1)^)), where s is the size of F. 

(2) F^^^ is a syntactically homogeneous non-redundant circuit. Its syntactic degree is either k 
or it is the constant 0. 

Notation: We allow circuits and formulas to use only sum gates with fan-in two. An expression 
X^iLi is an abbreviation for a formula of size 0{k) and depth 0(log k) with binary sum gates. 

For example, define '}2i=i •= Yli=i^ + Yli=[k/2'] • One can see that basic identities such 
as 

k m k k k 

^Xi = ^Xi+ ^ Xi, or y ■'^Xi = '^yxi 

1=1 i=l j=m+l i=l i=l 

have Pj proofs of size 0{k'^) and depth 0(log/c). 

Lemma 14. Let Fi,F2 be circuits of size < s and k a natural number. The following have 
proofs of size s ■ poly (A;) and syntactic degree < k. 

(i). (Fi©F2)W =Ff) + F('\ 

Proof. It is easy to see that for any circuit H of size s, H = has a proof of size 0{s). This, 
and the definition of F(^), gives (FieFa)^^) = ^eF^ \ Hence (FieFs)^'^) = F^^^ + f!^^^ 
by axiom CI. Since f[^\f^^\{Fi®F2Y^^ have size 0{s{k + we obtain (i). Part (ii) is 
similar. QED 

Lemma 15. If F is a circuit with syntactic degree < d and size s then 

d 



F = F^''^ 



k=0 

has a ¥c{¥) proof of degree d and size s ■ poly((i). 

,deg(u) j-,{k) 



Proof. For every node u in F, construct a proof of F^ = X^^^q • This is done by induction 

(k) 

on depth of u. If n is a leaf, this stems from the definition of , and if n = ui + n2 or 
w = ui • U2, by an application of the previous lemma. QED 



Proof of Proposition 6. Part (ii) follows from (i) by Lemma 15, hence it is sufficient to prove 
part (i). Let us first show that if F = G is an axiom of Pc(]F) of size s then F^'^) = G'^^^ has a 
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proof of size s ■ poly(fc) and syntactic degree < k. This is an application of Lemma 14. Let c be 
the constant such that equations (i) and (ii) in Lemma 14 have proofs of size 0{s ■ {k + 1)'^). 

The lemma gives a proof (FieF2)('=) = (Fi + F2)('=) and (Fi(g)F2)*^^^ = {Fi-F2Y''\ as required 
for the axioms CI and C2. 

Al and A9 are immediate. For the other axioms, consider for example the axiom Fi ■ {F2 ■ 
F3) = (Fi • F2) - Fa, where the circuits have size < s. We have to construct a proof of 

{Fi ■ {F2 ■ Fs))'^''^ = {{Fi ■ F2) ■ FsfK (3) 

By part (ii) of Lemma 14 the equations 

. (F2 . F3))(^) = yyriyyiFr-n (4) 




m ■ F2) ■ Fs)^''^ = J2{E^(^2-']-Ft'\ (5) 

i=0 \j=0 J 

can be proved by proofs with size roughly s ■ {k + ■ (k + 1). In Pc(F), the right hand sides of 
both (4) and (5) can be written as Yli+j+i=k Fi^ F2^ F.^''\ by a proof of size roughly s{k + 1)^ . 
This gives the proof of (3) of size s ■ poly(/c). 

Next, assume that F = G is derived from the equations Fi = Gi,F2 = G2 by means of 
the rules R1-R4, and we need to construct the proof of F^^-* = G'-'^^ from the set of equations 
^ G'W^ ^ (^W^ ^ ^ 0, . . . A:. The hardest case is the rule 



Fi — Gi F2 — G 



2 



F\ ■ F2 — Gi ■ G2 



We have to prove (Fi • F2)('') = (Gi • G2)(''^ By Lemma 14, we have proofs of (Fi • F2)('=) = 
E.=o,...kFi'^Ft'^ and {G, • G2)('^) = E.=o,...kG? . Hence {F, ■ F2)W = {G, ■ G2)(^) can 

be proved from the assumptions F^^^ = G^'\ Fg*^ = Gg \ i = 0, . . . k. The proof has size roughly 
s ■ {k + iy{k + l). QED 



4 Balancing Pc proofs 

In this section we prove Theorem 4 which is a proof-theoretic analog of the following result: 

Theorem 16 (Valiant et al. [VSBR83]). Let F be an arithmetic circuit of size s computing a 
polynomial f of degree d. Then there exists an arithmetic circuit [F] computing f with depth 
0(log^ d + log s ■ log d) and size poly{d, s). 

We first give an outline of the construction of [F], which closely follows that in [VSBR83] 
(we also refer the reader to [RY08] for an especially clear exposition). We emphasize that in our 
case, the relevant parameter is the syntactic degree of F: [F] will have size poly(s, d) and depth 
0(log^ d + logs • logd), where d is the syntactic degree of F. 

We write li G F to mean that u is a node in the circuit F. The following definition is 
important for the construction of balanced circuits: let w, v be two nodes in F. We define the 
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polynomial dwFy as follows: 



dwFy :- 



' 0, ifw ^ Fy, 

1, w = V , and otherwise: 

dwFy-^ + dwFj,2 , V = V1 + V2; 

{dwF^-^) • Fy^, if either u = fi • ^2 and deg(ui) > deg(u2), 
or V = V2 ■ vi and deg(fi) > deg(w2)- 



The idea behind this definition is the following: let w, v be two nodes in F such that 2 deg{'w) > 
deg(f). Then for any product node vi ■ V2 & F^, w can be a node in at most one of Fy-^jFy^, 
namely the one of a higher syntactic degree. If we replace the node w in Fy by a new variable 
z, Fy then computes a polynomial g(z,xi, . . . ,Xn) which is linear in z, and dwFy is the usual 
partial derivative dzg. 

It is not hard to show the following: 

Claim 17. Let w,v be two nodes in a circuit F. Then the polynomial dwFy has degree at most 
deg(i; ) — deg{w). 

In order to construct [F] , we can assume without loss of generality that F itself is a syntactic 
homogenous circuit of size s' = 0{d'^ ■ s). This is because a circuit of size s and syntactic degree 
d can be written as a sum of d + 1 syntactically homogeneous circuits of size at most s' and 
syntactic degree at most d. Now the construction proceeds by induction on i = 0, . . . , [logc?]. 
In each step i = 0, . . . , [log we construct: 

(i) . Circuits computing Fy, for all nodes v in F with 2*-i < deg(t;) < 2*; 

(ii) . Circuits computing dwFy, for all nodes w,v in F with 2*~^ < deg(f) — deg(7i;) < 2* and 

deg(t;) < 2deg(?i;). 

Each step adds depth O(logs'), which at the end amounts to a depth 0{log^ d + logd • logs) 
circuit. Furthermore, each node v in F adds 0{s') nodes in the new circuit and each pair of 
nodes v,w in F adds also O(s') nodes in the new circuit. This finally amounts to a circuit of 
size 0(s'3) = 0{d^ ■ s^). 

Let us now give the formal definition of [F]. First, for a circuit G and a natural number m, 

let 

Bm{G) := {t £ G : t = ti ■t2 and deg(t) > m and deg(ti), deg(t2) < m} . 



Definition of [F]. Let F be an arithmetic circuit of syntactic degree d. 
If F is not syntactic homogenous, let 

[F] := + . . . + [fW] . 

Otherwise, assume that -F is a syntactically homogenous circuit of degree d. For any node 
V £ F we introduce the corresponding node [Fy] in [F] (intended to compute the polynomial 
Fy); and for any pair of nodes v,w £ F such that 2deg(?i;) > deg(?;), we introduce the node 
[duuFy] in [F] (intended to compute the polynomial dwFy). 

The construction is defined by induction on i = 0, . . . , flogti], as follows: 
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Part (I): Let v e F: 

Case 1: Assume that deg{v) = 1, then F„ computes a Hnear polynomial aixi + . . . + a„2;„ + b 
(where, by homogeneity of F, b ^ iS all Oj's equal 0). Define 

[Fy] := aixi + . . . + a.„x„ + b. 

Case 2: Assume that for some < i < [log((i)]: 

2' < deg{v) < 2'+\ 

Put m = 2*, and define 

[F,]:= [dtF.]-[Ft,]-[Ft,], 

where we write t = ti -12, for any t € Bm{Fv). (Note that here [dwFi,], [FjJ and [Ft^] are nodes.) 

Part (II): Let w,v he a pair of nodes in F with 2deg(7i;) > deg(t;): 
Case 1: Assume w is not a node in F^. Define 

[dwF^] := 0. 

Case 2: Assume that w is in F^ and < deg(w) — deg(w) < 1. Thus, by Claim 17, the 
polynomial divf^ is a linear polynomial aixi + . . . + UnXn + b. Define 

[dwFi,] := aixi + . . . + a„Xn + 6. 

Case 3: Assume that w is in Fy and that for some < z < |'log((f)]: 

2^ < deg{v) -deg{w) < 2*+^ 

Put m = 2* + deg(t(;). Define: 

Finally, define [F] as the circuit with the output node [Fu], where u is the output node of F. 

One should make sure that the definition of [F] is well defined, and that it has the correct 
depth and size: 

Lemma 18. Let F be a circuit of size s and syntactic degree d. Then [F] is a circuit computing 
F, \F\ is of size poly(s,(i) and depth 0(log^ (i + log slog d). Moreover, every node [dwF^] in [F\ 
computes the polynomial dwF^. 
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Proof. The proof is as in [VSBR83] (see also [RY08]). We shall give a partial sketch of the proof 
here, for the benefit of the reader. 

First, assume that F is syntactic homogeneous of degree d. We need to verify that [F] is 
well-defined. That is, at stage i = 0, . . . , [logd], we compute all [F^] and [Sto-Fu] for all nodes 
v,u,w G F such that 2* < deg(i;) < 2*+-^ and 2* < deg(f ) — deg{u) < 2*+-^, and we want to show 
that the computation uses only nodes computed in previous stages. 

Take, for example. Case 2 in Part (I). For any t € BmiFy), m < deg(t) < deg(i;) < 2m. This 
implies that deg{v) — deg(t) < m = 2* and deg(t) < 2deg(t'). Hence, we have already computed 
[dtFy]. We have also already constructed [-PtJ, [Ft2], since deg(ti), deg(t2) < m = 2*. 

Inspecting the construction, [F] has size poly(s) and depth 0(logs • logd), given that F is 
syntactically homogeneous of size s and degree d. If F is not syntactically homogeneous, the 
definition [F] = + . . . gives a circuit of size poly(s, d) and depth 0(log^ d + log s ■ 

logd), since every F^^^ has size 0{s ■ k"^). QED 

We need to show that properties of [F] can be proved inside the system Pc- The key ingredient 
is given by the following Lemma. 

Lemma 19 (Main simulation lemma). Let Fi,F2 be circuits of syntactic degree at most d and 
size at most s. Then there exist Pc proofs of: 



The proof of Lemma 19 is deferred to the end of this section. We now use Lemma 19 to 
prove Theorems 4 and 5. 

Theorem 20 (Theorem 4 restated). Let F,G be circuits of syntactic degrees at most d such 
that F = G has a Pc proof of size s . Then 



(a). If F,G have depth at most t then F = G has a Pc proof of size poly(s,d) and depth at 
most 0(t + log s ■ log d + log^ d) . 

Proof. Part (i). Assume that F = G has syntactic degree d and a Pc proof of size s. By 
Proposition 6, F = G has a Pc proof of syntactic degree d and size s' = s ■ po\y{d). So let 
us consider such a proof S. By induction on the number of lines in S, construct a Pc proof of 
[Fi] = [F2], where Fi = F2 is a line in S. 

Let TTiQ and ko be such that (6) and (7) have Pc proofs of size at most ttt-q and depth /cq, 
whenever Fi(BF2, respectively, F10F2 have size at most s' and syntactic degree at most d. By 
Lemma 19, we can choose mo = poly(s', d) and ko = 0(log s' ■ log d + log^ d). 

First, show that if a line F = H in S is a ¥c axiom then [F] = [H] has a Pc proof of size 
cimo and depth 02^0, where ci,C2 are some constants independent of s',d. The axiom Al is 
immediate and the axiom A9 follows from the fact that [F] = F, if deg(-F) = 0. The rest of the 
axiom are an application of Lemma 19, as follows. Axioms CI and C2 are already the statement 
of Lemma 19. For the other axioms, take, for example. 




(6) 
(7) 



[F] = [G] has a Pc proof of size poly(. 



s, d) and depth 0(log s ■ log d + log^ 



d). 



Fi • (Gi + G2) = F • Gi + F • G2 . 
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We are supposed to give a proof of 



[Fi • (Gi + G2)] = [Fi . Gi + F • G2] 



with a small size and depth. By Lemma 19 we have a Pc proof 



[Fi • (Gi + G2)] 



[Fi] • [Gi + G2] = [Fi] • [Gi] + [Fi] • [G2] = [Fi] • ([Gi] + [G2]) . 



Lemma 19 gives again 



[Fi] 



([Gi] + [G2]) = [Fi] • [Gi + G2] = [Fi • (Gi + G2)] . 



Here we apphed Lemma 19 to circuits of size at most s', and the proof of [Fi • (Gi + G2)] = 
[Fi • Gi + F • G2] has size at most, say, lOOmo and is and depth at most 10A;o. 

An application of rules Rl, R2 translates to an application of Rl, R2. For the rules R3 and 
R4, it is sufficient to show the following: if S uses the rule 



then there is a proof of [Fi o Gi = F2 o G2], of size cittiq and depth C2ko, from the equations 
[Fi] = [Gi] and [F2] = [G2]. Similarly, this is an application of Lemma 19. 

Altogether, we obtain a proof of [F] = [G] of size at most cis'tuq and depth C2ko. 

Part (ii). Using (i), it is sufficient to prove the following: 

Claim. If F is a circuit with depth t, syntactic degree d and size s, then F = [F] has a Pc proof 
of size poly(s, d) and depth at most 0{t + log s ■ log d + log^ d) . 

Using Lemma 19, this claim can be easily proved by induction on s. QED 

Theorem 21 (Theorem 5 restated). Assume that F, G are formulas of syntactic degree at most 
d such that F = G has a Pc proof of size s. Then F = G has a Pj proof of size {s{d + l))'-'(l°S'^) . 

Proof. Recall the definition of the formula F* from Definition 1. It is not hard to show the 
following: 

Claim 1. // Hi = H2 has a Fc proof with p proof lines and depth k, then H* = H* has a P/ 

proof of size 0{p2^). 

Let F and G be as in the assumption. The previous theorem and Claim 1 give a P/ proof of 



Fi — F2 Gi — G2 
Fi o Gi = F2 o G2 



> ° € {•,+} 



[F]- = [G]- 

of size s ■ 20(iog^-iogrf+iog2d) ^ (s((i + i))0(iog<i)^ 



To complete the proof, it is sufficient to show that: 



Claim 2. If H is a formula of size s and syntactic degree d, then [H]' = H has a Pj proof of 
size l))^(i°g'^). 



This is proved by induction on s using Lemma 19. 



QED 



17 



Proof of Lemma 19 



It is sufficient to prove the statement under the assumption that Fi©i*2 and Fi®F2 are syn- 
tactically homogeneous. This is because of the following: assume that the lemma holds for 
syntactically homogeneous circuits. First, note that for any circuit of syntactic degree d, 



[F] 



+ ••• + 



has a proof of size poly(s, d) and depth 0(log d ■ log s + log^ d): if F is not syntactically homo- 
geneous, then this stems from the definition of [F]] otherwise, F is syntactically homogeneous, 
and so [F^^'^\ is the circuit whenever k < d and it is sufficient to construct the proof of 
[F] = [fW], which can be done by induction on the size of F. Second, if for example Fi©i<2 is 
not syntactically homogenous, then by definition of [•], we have 



A:=0 



where d = deg(Fi©F2). By the definition of F^'^), (Fi©F2)('') is a syntactically homogeneous 

f ^©Ff \ or it is of the form F^''\ if F^!'^ = 0, {e, e'} = {1, 2}. 



circuit which is either of the form F, 



In both cases we obtain a proof of [(Fi + F2)^*''^] = [F^''^] + [Fg'^''], of small size and depth. This 
gives a Pc proof of 



d 

E 

k=0 



k=0 



(fc) 



k=0 



k=0 



We thus consider the syntactically homogeneous case. Let m{s,d) and r{s,d) be functions 
such that for any circuit F of syntactic degree d and size s, [F] has depth at most r{s,d) and 
size at most m{s,d). By Lemma 18, we can choose 

m(s, d) = poly(s, d) and r(s, d) = 0(log^ d + log d • log s). 

Notation: In the following, [Fu] and [dwF^] will denote circuits: [F„] and [dwF^] are the 
subcircuits of [F] with output nodes [Fy] and [dwFy], respectively; the defining relations between 
the nodes of [F] (see the definition of [F] above) translate to equalities between the corresponding 
circuits. For example, if v and m are as in Case 2, part (I) of the definition of [F], then, using 
just the axioms CI and C2, we can prove 



[Fy]= E [dtFy].[Ft,]-[Ft,] 



(8) 



(where the left hand side is defined to be the circuit [Fy] in which [fJtFt,] , [FfJ , [Ft,] are nodes, 
and so the corresponding circuits whose roots are [5tFt,] , [Ft-,] , [Ft,] can have common nodes, 
while in the right hand side these circuits have disjoint nodes). Such proof of (8) is of linear size 
in the size of [Fy]. We shall use these kind of identities in the current proof. 

Also, note that if F has size s and degree d, the proof of (8) has size 0{s'^m{s, d)) and has 
depth 0{r{s,d)). 

The following statement suffices to conclude the lemma. The recurrence (9) implies A(,s, d) = 
poly(s, d) and it is enough to take F in the statement as either Fi © F2 or Fi F2, and v as the 
root of F. 
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Statement: Let F be a syntactically homogenous circuit of syntactic degree d and size s, and 
let i = 0, . . . , [log d] . There exists a function A(s, i) not depending on F with 

X{s, 0) = O(s^) and A(s, i) < 0{s^ ■ m{s, d)) + X{s, i - 1), (9) 

and a Pc proof-sequence of size at most X{s,i) and depth at most 0{r{s,d)), such that the 
following hold: 

Part (I): For every node v £ F with 

deg(^;) < 2\ (10) 

contains the following equations: 

[F^] = [Fi,J + [F^^] , in case v = vi + V2, and (11) 
[Fy] = [Fy^] ■ [Fy^] , in case v = vi ■ V2. (12) 

Part (II): For every pair of nodes w ^ v £ F, where w £ Fy, and with 

deg{v) - deg(w) < 2* and (13) 
2deg(i«) > deg(w), (14) 

contains the following equations: 

[dwFy] = [dwFy-^] + [dwFyr,], in case v = vi + V2; (15) 

[dwFy] = [dwFy-^] ■ [Fy^], in case v = vi ■ V2 and deg(fi) > deg(7;2) 

ov V = V2 ■ vi and deg(i;i) > deg(f2). (16) 



We proceed to construct the sequence by induction on i. 
Base case: i = 0. We need to devise the proof sequence ^'o- 

Part (I). Let deg(u) < 2^. By definition, [Fy] = flia^j + b, where Oj's and b are field 

elements. If v = vi +V2, we have also [FyJ = Yl^=i o^^f^^i + b'^^\ for e = 1, 2. Hence the equation 
[Fy] = [Fy^] + [^^2] is the (true) identity: 

i=l i=l 1=1 

which has a proof of size O(s^) and depth O(logs) (we assume without loss of generality that 
n < s). 

In case v = vi ■ V2, either deg(ui) = or deg(t;2) = and the proof of [Fy] = [Fy^] ■ [Fy^] is 
similar. 
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Part (II). Since deg{v) — deg{w) < 1, we have [dwFy] = Y27=i o-i^i + b, for some field elements 
Oj's and b. 

In case v = vi + V2, we have deg(fe) —deg{w) < 1 and so [dwFyJ = J27=i '^[^^^i + b^^\ where 
e = 1,2. The assumption w ^ v and Lemma 18, guarantee that [dwFy] = [dwF^-^] + [dwF^^] is 
a correct identity, and we can thus proceed as the base case of Part (I) above. 

In case v = vi ■ V2, assume without loss of generality that deg(wi) > deg(z;2). Again, we 

have [dwFy-^] = Y17=i '^i^^^i + b^^^ ■ From the assumptions, we have that w € F^-^, which implies 

deg(t'i) > deg{w) and so deg(f2) < 1. Hence [F^^] = Z^iLi*^!^^^* + {One can note that 
at least one of [dwF^^] or [F^^] is constant). Thus we can prove the (correct, by virtue of the 
assumption w ^ v) identity [dwF-u] = [divF^-^] ■ [F^^] with a ¥c{¥) proof of size 0{s^) and depth 
O(logs). 

Overall, will be the union of all the above proofs, so that ^'q contains all equations (11), 

(12) (for all nodes v satisfying (10)), and all equations (15) and (16) (for all nodes v,w satisfying 

(13) and (14)). The proof sequence ^'o has size A(s,0) = O(s^) and is and depth O(logs). 



Induction step: We wish to construct the proof-sequence ^t+i. 



Part (I). Let v be any node in F such that 

2' < dQg{v) < 2^+^ 

Case 1: Assume that v = vi + V2- We show how to construct the proof of [F^] = [F^J + [F^^]. 
Let m = 2*. From the definition of [•] we have: 

[F,] = [F,,+,,]= [Ft,\-[Ft,]-[dt{F,,+,,)]. (17) 

Since deg(fi) = deg(z;2) = deg(f), we also have 

[F.A= [FtA-[Ft,\.[dt{F,^)l for eG {0,1}. (18) 

If t € Bm{Fv) then deg(t) > m = 2'. Therefore, for any t € Bm{Fv), since deg('y) < 2*+^, we 
have deg{v) — deg(t) < 2* and 2deg(t) > deg('y) and t ^ v (since t is a product gate). Thus, by 
induction hypothesis, the proof-sequence ^'j contains, for any t G Bm{Fy), the equations 

[dt{F,,+y,)] = [dtFy,] + [dtF,,]. 

Therefore, having as a premise, we can prove that (17) equals: 
Y [FtA-[Ft,]-mFvA + [dtF,„]) 

= E [FtA-[Ft,]-[dtF,A+ E [FtA-[Ft,]-[dtF,,]. 

If t G BmiFy) and t ^ F^^ then [dtF^^] = 0. Similarly, if t G ^m(F^) and t ^ Fy^ then [dtFy^] = 0. 
Hence we can prove 

E \-dtFyJ= Yl fore = 1,2. (20) 

t&Bm(Fv) t(^Br,^{Fv^) 
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Thus, using (18) we have that (19) equals: 

te-Bm(F„J teBm(F„2) (21) 

The above proof of (21) from has size 0(s^ ■ m{s,d)) and depth 0(r(s,(i)). 

Case 2: Assume that v = vi ■ V2- We wish to prove [F^] = [F^^] ■ [F^^]. Let m = 2*. We assume 
without loss of generality that deg(fi) > deg('y2)- By the definition of [•], we have: 

If V G BmiFv), then Bm = {v} and we have [Fy] = ■ [F^^] ■ [d^Fy]. Since [d^F^] = 1, this 
gives [Fy] = • [F^^], and we are done. 

Otherwise, assume v Bm{Fv)- Then m = 2* < deg(fi) (since, if deg(fi) < m, then also 
deg('y2) < and so by definition v S Bm{Fv)). Because, moreover, deg(fi) < 2*+-^, we have 

[Fv,]= E [FtA-[Ft,]-[dtFy,]. (22) 

Since deg(?;) < 2*+^ and deg(t) > m = 2*, for any t £ Bm{F^), we have 

deg(f) - deg(t) < 2* and 2deg(t) > deg(-y). 

Since v t,hy induction hypothesis, ^'j contains, for any t £ Bm{Fy), the equation: 

[dm,.,,)] = [dtF,,] ■ [Fy,]. (23) 

Using (23) for all t € Bm{Fy), we can prove the following with a Pc(lf) proof of size 0{s^ ■m{s, d)) 
and depth 0{r{s,d)): 

[FtA-[Ft,]-[dtFy]= Y [Ft,]-[Ft,]-[dt{Fy,.y,)] 

= Y [Ft^]-[Ft,]-{[dtFy,].[Fy,]) 

= [Fv,]- E [FtA-[Ft,]-[dtFy,]. (24) 

t&Bm{Fy) 

Since Bm{Fy,) C Bm{Fy), we can conclude as in (20) that 

Y [Ft,]-[Ft,]-[dtFy,]= Yl [FtA-[Ft,]-[dtFy,]. 

t&BmXFy) teBm{Fv,) 

Using (22), (24) equals [Fy,] ■ [Fy,]. The above proof-sequence (using ^'j as a premise) has size 
0(s^ • m{s,d)) and depth 0{r{s,d)). 
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We now append with all proof-sequences of [F^] = [F^,J + [F^^] for every v from Case 1, 
and all proof-sequences of [Fy] = [F^jJ • [Fy^] for every v from Case 2. We obtain a proof-sequence 
^'i^i of size 

A(s, i + 1) < 0(s^ • m{s, d)) + A(s, i), 

and depth 0{r{s,d)). 

In Part (II), we extend ^'^^i with more proof-sequences to obtain the final ^'i+i. 

Part (II). Let v ^ w he a pair of nodes in F such that w € Fy and assume that 
2* < deg{v) - deg{w) < 2*+^ and 2deg(u;) > deg(t'). 

Let 

m = 2* + deg(t(;). 
Case 1: Suppose that v = vi + V2- We need to prove 

[dwFy] = [dwFy,] + [dwFy,] (25) 

based on as a premise. By construction of [dwFy], 

[dwFy]= Yl [dtFy] ■ [dwFt,] ■ [Ft,] 

= Yl mFy,+y,)]-[dwFt,].[Ft,]. (26) 

Since deg(vi) = deg(t;2) = deg(u), we also have 

[dwFy^]= Yl [dtFy^] ■ [dwFt,] ■ [Ft,], fore = 1,2. (27) 

Since m = 2* + deg{w), we have deg(t) > 2* + deg(it;), for any t € Bm{Fy). Thus, by deg(f ) — 
deg{w) < 2*+^, we get that for any t G Bm{Fy): 

deg{v) — deg(t) < 2* and 2deg(t) > deg(w), and 
t ^ V (since t is a product gate) . 

Therefore, by induction hypothesis, for any t G Bm{Fy), contains the equation 

[dt{Fy,+y,)] = [dtFy,] + [OtFy,]. 

Thus, based on ^i, we can prove that (26) equals: 

Y {[dtFy,] + [dtFy,])-[dwFt,]-[Ft,] 

t£Bm{Fv) 

= Y [dtFy,]-[dwFt,]-[Ft,]+ Y [dtFy,]-[dwFt,]-[Ft,]. (28) 
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As in (20), using (27) we can derive the fohowing from (28): 

[dtF,,]-[dwFt,]-[Ft,]+ Yl [dtF,.]-[dwFt,].[Ft,] 

= [dwF^^] + [dwF^,]. 

The proof of (25) from shown above has size 0(s^ • m{s,d)) and depth 0{r{s,d)). 

Case 2: Suppose that v = vi ■ V2- We assume without loss of generahty that deg('i;i) > deg(t>2) 
and show how to prove 

[dwF,] = [dwF,,] ■ [F,,]. (29) 

By construction of [dwFy]: 

[dwF,]= Y [dtF,] ■ [dwFt,] ■ [Ft,] 

= Y [dt{F,,.,,)]-[dwFt,]-[Ft,]. (30) 

Similar to the previous case, for any t G Bm{Fy) we have 

deg(v) - deg(t) < 2* and 2deg(t) > deg(v). 

If u G Bm{Fv) then Bm(,Fy) = {v} and so (30) is simply dvF^ ■ [dwF^^] ■ [Fy,] = [dwFy,] ■ [Fy,] 
as required. Otherwise, assume that v ^ Bm{Fy). By induction hypothesis, contains the 
following equation, for any t G BmiFy): 

[dt{Fy,.y,)] = [dtFy,] ■ [Fy,] . 

Using as a premise, we can then prove that (30) equals: 

Y {[dtFy,] ■ [Fy,]) ■ [dwFt,] ■ [Ft,] = j Y • ■ [^*^] I • t^-^]- (31) 

As in (20), we have EteB^iF.)[dtFy,] ■ [dwFt,] • [Ft,] = EteB^AF.J^^^-i] ' " i^t^]- Also, 

since vi ■ V2 = v ^ BmiFy), we have deg(t;i) > m = 2* + deg(ti;), and so 

[dwFy,]= Y [dtFy,] ■ [dwFt,] ■ [Ft,] . (32) 

Hence by (32), (31) equals [d^Fy-^] ■ [Fy,]. 

The above proof of (29) from has size 0(s^ • m(s, d)) and depth 0(r(s, d)). 

We now append from Part (I) (which also contains ^i) with all proof-sequences of 
[dwFy] = [dwFy^] + [dwFy,] in Case 1 and all proof sequences [dwFy] = [dwFy^] ■ [Fy,] in 
Case 2, above. We obtain the proof-sequence ^i+i of size 

A(s, i + l) < 0(/ • m{s, d)) + A(s, i), 

and depth 0{r{s,d)), as required. 
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5 Proofs with division 



In this section, we investigate proofs with divisions (as defined in Section 2.3), and prove Theorem 
8. 

Let us first turn the reader's attention to some pecuharities of the system F'^'^: 

• We must be careful not to divide by zero in Pj^. Hence proofs are not closed under 
substitution. It may happen that F{z) = G{z) has a P-^ proof S, F(0) = G(0) is defined, 
but substituting z by throughout S is not a correct proof. 

• Whereas P""*^ is sound with respect to polynomial identities, it behaves erratically if one 
considers proofs from assumptions. For example, P~^ augmented with the axiom x'^ — x = 
proves that 1 = 0. 

• Prima facie, it is not clear whether a P~^ proof of equation F = G can be transformed to 
a proof of F = G which contains only the variables contained in F and G. See Remark 
25. 

In the sequel, we will consider substitution instances of equations we prove in P^^. For 
instance, we will need to substitute for some variables in the matrix X, when proving equations 
involving the circuit DET(X), and we have to guarantee that our proofs remain correct after 
such a substitution. 

There are two general ways how to securely handle substitutions in P~-^ proofs. The first 
one is to substitute only algebraically independent elements: replacing variables zi, . . . ,Zk with 
circuits Hi , . . . , can never produce an undefined proof, if the circuits compute algebraically 
independent rational functions. The second way is offered in Corollary 29. This corollary allows 
one to construct a new proof of -F(O) = G(0) from the proof of F{z) = G{z). Note, however, 
that in Corollary 29 the new proof will be polynomial only if the syntactic degree of F and G is 
polynomial. 

Since the determinant circuit DET has an exponential syntactic degree (see Section 7), the 
second approach to substitution is not suitable for the DET identities. The first approach, which 
substitutes algebraically independent elements, often cannot cannot be used either, because we 
need to substitute variables by field elements. Therefore we must sometimes simply make sure 
that the specific substitutions used do not make the proofs undefined. To this end, we use the 
following terminology: let x = {xi, . . . ,Xk) be a list of variables and U = {Ui, . . . ,Uk) a list of 
circuits with divisions. We say that a circuit F{x) with divisions is defined for x = U, if no 
divisions by zero occur in F{U); likewise, we say that a P~^ proof S is defined for x = U (or 
simply defined, if the context is clear), if every circuit in S is defined for x = U. 

5.1 Eliminating division over large enough fields 

We first prove Theorem 8 under the assumption that the underlying field F is large. To eliminate 
division gates from proofs, we follow the construction of Strassen [Str73], in which an inverse 
gate is replaced by a truncated power series. In order to eliminate division gates over small 
fields, additional work will be needed (see Section 6). 

Let F be a circuit with divisions. We say that F is a circuit with simple divisions, if for 
every inverse gate in F the circuit F^ does not contain inverse gates. A size s circuit with 
division F can be converted to a size 0{s) circuit of the form Fi ■ F2^, where Fi,F2 do not 
contain inverse gates, as follows. 
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For every node v introduce two nodes Den(?;) and Num(t;) which wih compute the numerator 
and denominator of the rational function computed by v, respectively, as follows: 

(i) If V is an input node of F, let Num(u) := v and Den(u) = 1. 

(ii) If w = u~^, let Num(u) := Den(u) and Den(t;) := Num(n). 

(iii) If V = ui ■ U2, let Num(z;) := Num(i)i) • Num(f2) and Den{v) := Den(7;i) • Den(7;2). 

(iv) If V = ui + U2, let Num(f) := Num(iii) • Den(u2) + Num(ti2) • Den(ni) and Den(i)) : = 
Den(ui) • Den(u2). 

Let Num(F) and Den(F) be the circuits with the output node Num(t(;) and Den{w), re- 
spectively, where w is the output node of F. The following lemma will be used in Proposition 
24: 

Lemma 22. Let F be any field. 

(i). If F is a size s circuit with division, then 

F = Num{F) ■ Den{Fy^ 

has a P^"'^(F) proof of size 0{s). The proof is defined whenever F is defined. 

(ii). Let F, G be circuits with division. Assume that F = G has a P~"'^(F) proof of size s. Then 
Num{F) ■ Den{F)~^ = Num{G) ■ Den{G)-^ has a P~HlF) proof of size 0{s) such that every 
circuit in the proof is a circuit with simple divisions. 

Proof. Part (i) is proved by straightforward induction on the size of F and part (ii) by induction 
on the number of proof lines. We omit the details. QED 

Let k he a, fixed natural number and define pow^(l — z) to be the circuit 

poWfc(l - z) := 1 + z H h . 

In other words, powj.(l — z) is the first A; + 1 terms of the power series expansion of 1/(1 — z) 
at z = 0. 

Let be a division-free circuit and let a := i^C^). Assume that a 7^ 0, that is, the polynomial 
computed by F has a nonzero constant term, and let Invfc(F) denote the circuit 

Invfc(F) :=a-i •poWfc(a-iF) 

= • (1 + (1 - a~^F) + (1 - a^^Ff + • • • + (1 - a^^F)^') . 

Note that a^^ is a field element and hence liWk{F) is a circuit without division. The following 
lemma shows that Invf^^F) can provably serve as the inverse polynomial of F "up to the k 
power" : 

Lemma 23. Let F be any field and let F be a size s circuit without division such that F(^^ 7^ 0. 
Then the following have Pc(F) proofs of size s ■ poly(A;).' 

(F-InvfcF)(°) = 1 (33) 
{F ■ InvfcF)(') = 0, forl<i<k. (34) 
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Proof. Let z abbreviate the circuit 1 — a ^F. Then F = a(l — z) and Invfc(-F) = a ^(1 + z + 
z"^ + ■ ■ ■ + z''). By elementary rearrangement, we can prove 

F • Invfe(F) = {l-z){l + z + z^ + ...z'') = l- z^+^ . 

By Lemma 14, (F • Invfc(F))(°) = 1 - {z'^+^f^) and (F • Invfc(F))(*) = for i > 0. It 

is therefore sufficient to prove for every i < k, = 0. This follows by induction using 

Lemma 14 and the fact that = 0. QED 

The dependency on the field comes from the following fact, which follows from the Schwartz- 
Zippel lemma [SchSO, Zip79]: 

Fact. Let fi,---,fs G ¥[X] be non-zero polynomials of degree < d, where X = {xi, . . . x^}. 
Assume that |F| > sd. Then there exists a G F" such that fi{a) ^ for every i £ {1, . . . , s}. 

Proposition 24. There exists a polynomial p such that the following holds. Let F, G be circuits 
without division of syntactic degree at most d. Assume that F = G has a P;:^(F) proof with 
divisions of size at most s and suppose that |F| > 2^'^''). Then F = G has a ¥c{¥) proof of size 
s-p{d). 

Proof. Let 5 be a P~^(F) proof of F = G of size s. By Lemma 22, we can assume that the proof 
contains only simple divisions. Let C be the set of circuits H such that 5 contains a circuit with 
a node such that u computes H. Then \C\ < s and degH < 2^^'^^ for every IL gC, since H 
has size at most s. By the Fact above, there exists a point b € F" such that H{b) ^ for every 
H £ C, where n is the number of variables in S. 

Without loss of generality, we can assume that b = (0, ... ,0). Let S' be the sequence of 
equations obtained by replacing every circuit {H)~^ in 5 by Invfc(iJ). The sequence S' does 
not contain divisions, but is not yet a correct proof, since the translation F ■ Invfc(F) = 1 of 
the axiom D is not satisfied. However, we claim that for every equation Fi = F2 in S' and 
every k<d, Fi^^ = ^ has a Pc proof of size s ■ p{d) for a suitable polynomial p. The proof 
is constructed by induction on the length of S", as in Proposition 6. The case of the axiom D 
follows from Lemma 23 as follows: (F • Invfc(F))(°) = 1 = 1^°) and (F • Invfc(F))(j) = = l^-'), if 
j G 1, . . . , /c. Consequently, we obtain proofs of F^^'^ = G^^\ for every k < d. By Lemma 15, we 
have Pc(F) proofs of F = Efc<d-^^^'^ G = T.kKdG^^^ ■ This gives Pc(F) proofs of F = G with 
the correct size. QED 

Another application of Schwartz-Zippel lemma is the following: 

Remark 25. Let F be an arbitrary field and assume that F = G has a P^T^P) proof of size 
s. Then there exists a P^^(F) proof of F = G of size O(s^) which contains only the variables 
appearing in F or G. 

Proof. Let be a proof of F = G of size s which contains variables zi, . . . , not appearing in 
F or G. Assume that F or G actually contain at least one variable x, otherwise the statement 
is clear. It is sufficient to find a substitution zi = Hi, . . . , z^ = Hm for which the proof 5 
is defined and Hi, . . . , H^n are circuits of size 0{s) in the variable x only. We will choose the 
substitution from the set M = {x^, x^, x^ . . . , x^''"}, where c is a sufficiently large constant. Note 
that x^ can be computed by a circuit of size log2 p + 2, and so every circuit in M has size 0{s). 
That such a substitution exists can be shown as in Proposition 24, when we consider M as a 
subset of the field of rational functions. QED 
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5.2 Taylor series 

For a later application, we need to introduce the basic notion of a power series. Let F = F(x, z) 
be a circuit with division. We will define /S.^k{F) as a circuit in the variables x, computing the 
coefficient of z^ in F, when F is written as a power series at z = 0. This is done as follows: 

Case 1: Assume first that no division gates in F contain the variable z. Then we define lS.^k{F) 
by the following rules (the definition is similar to that of F^^^ in Section 3, and so we will be 
less formal here): 

(i) A^(z) := 1 and /^^k{z) := 0, if A; > 1. 

(ii) If F does not contain then A..^o{F) := F and A^k{F) := 0, if A; > 0. 

(iii) AAF + G) = AAF) + AAG). 

(iv) AAF ■ G) = Eto ^AF) ■ A^k-.{G). 

Case 2: Assume now that some division gate in F contains z. We let: 

Fo:= ((Den(F))(z/0)«, 

where, given a circuit G, G'^ is the non-redundant version of G (see definition in Section 3) and 
G{z/Q) is obtained by substituting in G all occurrences of z by the constant 0. 
In case Fq 7^ 0, we define: 

AAF) := Fo"' • (Num(F) • pow^ {F~^ ■ Den(F))) . 

Note that z does not occur in any division gate inside Num(F) • pow^ (-^o~^ ' Den(F)) , and so 
A^kF is well-defined. 

Proposition 26. Assume that F(x, z) = G(x, z) has a proof of size s which is defined for 
z = 0. Then 

AAF) = AAG) 

has a proof of size s ■ poly(/c). 

Proof. The proof is almost identical to that of Proposition 24. We omit the details. QED 

6 Simulating large fields in small ones 

We recall the notation for matrices from the introduction. In this paper, matrices are understood 
as matrices whose entries are circuits and operations on matrices are operations on circuits. Let 
F = {F.-.,] i,jG[n] be an n X n matrix whose entries are circuits Fij] and similarly G — {Gjj}jjg[„]. 
Addition and multiplication of matrices are defined in the obvious manner, as follows. Let 
[F -\- G)ij denote Fij -\- Gij, then F -\- G is the matrix {{F + For multiplication, let 

{F ■ G)ij denote ^1^=1 Ftp • Gpj, then F ■ G is the matrix {{F ■ ,,g[„], and aF is the matrix 

{a ■ -Fjj}j jg[„], where a is a circuit with a single node. The equation F = G denotes the set of 
equations Fij = Gij, i,j S [n]. 

Lemma 27. Let X,Y,Z be n x n matrices of distinct variables. Then the following identities 
have polynomial- size ]Pc(F) proofs: 
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X + Y = Y + X X + {Y + Z) = {X + Y) + Z 

X-{Y + Z) = X-Y + X-Z {Y + Z)-X = Y-X + Z-X 

X ■ {Y ■ Z) = {X - Y) ■ Z. 

Proof. Each of the equahties is a set of v? correct equations with degree < 3 and size 0{n). 
Every such equation has a Pc-proof of size 0(n'^). QED 

Let Fi = GF{p) and F2 = GF{p'^), where p is a prime power. We will show how to simulate 
proofs in Pc(F2) by proofs in Pc(Fi). Recall that F2 can be represented by n x n matrices with 
elements from Fi, that is, there is an isomorphism between F2 and a subset of GL„(Fi). This 
allows one to treat a polynomial / over F2 as a matrix of n? polynomials over Fi. Similarly, we 
can define translation of circuits: let -F be a circuit with coefficients from F2. Let F be an n x n 
matrix of circuits {Fij, i,j G [n]} with coefficients from Fi, defined as follows: for every gate u 
in F, introduce gates u = Uij, and let: 

(i) . If li € F2 is a constant, let u := 6{u). 

(ii) . If is a variable, let u := u • 7„ (where In is the n dimensional identity matrix). 

(iii) . U u = V + w, u := V + w, and ii u = v ■ w, u := v ■ w 

Then F is the matrix computed by iB where w is the output of F. 

Here, v + w, {v ■ w) and u ■ In are defined as the corresponding matrix operations on circuit 
nodes. 

Lemma 28. Let F,G be circuits of size < s with coefficients from ¥2- Then 

F®G = F + G, F0G = F(g)G, (35) 
F-G = G-F (36) 

have Pc(Fi) proofs of size s ■ poly(n) 

Proof Identities (35) follow from the definition of F by means of axioms CI, C2. 

Identity (36) follows by induction on the circuit sizes of F and G. We first need to construct 
the proof of 

zl -z^ = z^ -zT , 

where each zi, Z2 is either a variable or an element of F2. So assume that zi is a variable. Then 
'zi = zi ■ I. This gives ^ ■'Z2 = zi ■Z2- But Z2 is a matrix for which each entry commutes with 
zi, which gives a proof oi zi ■ Z2 = Z2 - zi = Z2 The case of Z2 being a variable is similar. 
If both zi,Z2 € F2, we are supposed to prove 0{zi) ■ 6{z2) = 0{z2) ■ 0{zi). But this is a set of 
true equations of size 0{n) that contain only elements of Fi, and hence it has a proof of size 
O(n^). In the inductive step, use Lemma 27 to construct a proof of (Fi + F2) ■ G = G{Fi + F2) 
and ol{F\-F^)-G = G{F\ ■ F^) from the proofs oiF\-G = G-F\aiidF^-G = G-F^. QED 



Proof of Theorem 9. Let F, G be circuits with coefficients from F2 such that F = G has a Pc(F2) 
proof of size s. We wish to show that F = G have proofs of size s ■ poly(n) in Pc(Fi). This 
implies Theorem 9, for if F, G contain only coefficients from Fi then Fu = F and Gu = G. 

The proof is constructed by induction on the number of lines. Axioms CI, C2 follow from 
equations (35) in Lemma 28, and A4 from equation (36). A9 is a set of true constant equations. 
The rest of the axioms are application of Lemma 27. The rules Rl, R2 are immediate, and R3, 
R4 are given by Lemma 28. QED 
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Proof of Theorem 8. Theorem 8 follows from Proposition 9 and Proposition 24. 



QED 



For a circuit with division F, define its syntactic degree by 



degF := deg(NumF) + deg(DenF). 



Corollary 29. Let F he any field and let F , G, H he circuits with divisions. Assume that 
deg(-F) and deg(G) is at most d and that H has size si. Suppose that F{z) = G{z) has a P^^(F) 
proof of size S2 and that F{H), G{H) are defined. Then F{H) = G{H) has a P~^(F) proof of 
size siS2 • poly((i). 

Proof. We aim to construct a proof of F{z) = G{z) of size S2 ■ poly((i) such that the proof is 
defined for z = H. We can then substitute H for z throughout the proof to obtain a proof of 
F{H) = G{H) of the required size. By Lemma 22, we have proofs of 



F{z) = Num(F(z)) • Den(F(z))-^ G{z) = Num(G(z)) • Den(G'(z))-^ . (37) 
This and F{z) = G{z) gives a P^-'^(F) proof of 

Num(F(z)) • Den(G(z)) = Num(G(z)) • Den{F{z)) , 



of size 0(^2) • The last equation does not contain division gates, and so it has a Pc(F) proof 
of size S2 ■ poly((i) by Theorem 8. This proof is defined for z = H because it does not contain 
division gates. By Lemma 22, the proofs of (37) are defined ioi z = H (because F{H) and G{H) 
are defined by assumption). In particular, both Den{F{z)) and Den(G(z)) are nonzero, and we 
have a proof of 



Num(F(z)) • Den(F(z))-^ = Num(G(z)) • Den(G(z))-^ 
that is defined for z = H. Using (37) we obtain a proof of = G of size S2 ■ poly((i) that is 



7 Computing the determinant 

We are now done proving the structural properties of Pc and ¥f and we proceed to construct 
proofs of the properties of the determinant. 

7.1 The determinant as a rational function 

In order to compute the determinant and prove its properties, we shall first define the inverse 
of a matrix. Let X = {xij}ij^[n] be a matrix consisting of distinct variables. Recursively, we 
define n x n matrix whose entries are circuits with divisions. Let us first assume that n is 
a power of 2. If n = 1, let := (xj"/). If n > 1, divide X into square blocks as follows: 



defined for z = H. 



QED 




(38) 



We have already constructed the matrix X^ . Let 

D{X) := X4 - XsXf . 
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Since the entries of D(X) are algebraicahy independent (because the entries of X4 are alge- 
braically independent and the matrix X^X^^ X2 does not contain variables from X4), the com- 
putation of D{X)~^ does not use divisions by zero, and we can also construct D(X)~^. Let 

y^i ._ ( X^\l + X2D{Xr^X:,X^^) -X^'X2D{Xr' \ 

^ V -DiXr^XsX^^ D{X)-^ ) ■ ^"^^^ 

We now argue that (39) defines a polynomial-size circuit. Let A(n) be the size of the 
circuit X~^ , for X si\ n x n matrix. The construction of X~^ involves first computing 
which amounts to X{n/2) nodes. Having already computed X^^ we can compute 
D{X) = X4 — X2X^^X3 with only n'^ additional gates, for some constant c. Now, having 
already computed D{X), computing D{X)~^ can be done with additional A(n/2) nodes. This 
gives us the recurrence A(n) < 2 • A(n/2) -|- n'^, which implies that A(n) = n'-^^^\ 

We can now define the determinant as a rational function. If n = 1, let DET(X) := xu. 
Otherwise, n > 1 and X is as in (38), let 

DET(X) := DET(Xi(X4 - XgXf ^^2)) = I)ET{XiD{X)) . 

In a similar manner as above, DET(X) is a polynomial-size circuit with division. 
If n is not a power of two, let uq := 2l^'°S"T and let 



Y :-- 



Ino—n 



X 

By induction, we can show that both Y"^ and DET(y) are defined, and 

where Z is an n x n matrix. We let DET(X) := DET(y) and X~^ := Z. 

The fact that DET(X) indeed computes the determinant (as a rational function) is a con- 
sequence Lemma 33 below, where we show that can prove the two identities for DET(X) 
that are uniquely satisfied by the determinant polynomial. 

Note: At this stage, DET(X) is computed by a circuit with division, and hence it is not defined 
on all inputs. Also note that DET(X) has an exponential syntactic degree. 



In the following constructions, we will use a general property of the system , which is 
analogous to the property of Pc mentioned in Proposition 2: 

Lemma 30. Assume that F, G are circuits with division of size s and that F = G has a 
proof with k proof lines. Then F = G has a P~^ proof of size poly(s, k). 

Proof. The proof is almost the same as the proof for extended and circuit Frege (see [Kra95] 
and [Jef04], respectively), so we give only a sketch. Let us have a proof S F = G with k 
lines, where F, G are in variables x. Without loss of generality, assume that F and G are circuits 
without divisions (otherwise consider the equation Num(F)Den(G) = Den(F)Num(G) and use 
Lemma 22; this adds 0{s) to the number of lines). Let Ti be the set of circuits appearing as a 
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subcircuit of some circuit in S. For every H 7i, introduce a new variable z{H). Let Z be the 
set of these variables and let E be the set of all equations of the form 



z{Hi(BH2) = z{Hi) + z{H2), 
z{Hi®H2) = z{Hi)-z{H2), 
z{u) = u ii u €¥ U X , 
z{H''^)-z{H) = 1. 

We will say that the first three equations define z{Hi®H2), z{Hi(giH2) and z{u) respectively, 
and the last equation defines z{H~^). Note that every z € Z has exactly one defining equation 
in £. 

By induction on k, one can show that z{F) = z{G) has a Pj proof of size 0{k) from the 
equations £. Moreover, F = G has a Pc proof T of size 0{k + s) from £. 

Let Zi be the set of variables from Z occurring in T and Zq the set of z G -Ei such that 
T does not contain the defining equation of z. Every formula H in T can be interpreted as 
a circuit with divisions H* in variables Zq\J x: understand the variables Zi \ Zq as nodes in 
accordance with their defining equations. H* is a correct circuit (i.e., does not use divisions by 
zero), provided S was a correct proof to begin with. Moreover, H* has size at most \Zi\ times 
the size of H. In this manner, one obtains a P~^-proof of F = G of size 0((s + k)'^). (This proof 
contains the additional variables Zq. Compare with Remark 25.) QED 

Proposition 31. Let X = {xij}ij^[n] be a matrix with r? distinct variables. Then both 

X ■ X~^ = I and - X = I 

have a polynomial- size P~-^ proof. The proof is defined for X = U, for any matrix U whose 
entries are circuits with division such that is defined. 

Proof. Let us assume that n is a power of two; the general case follows. Let us construct the 
proofs of X ■ X~^ = I and X~^ ■ X = I hy induction. If n = 1, we have x ■ x~^ = x~^ ■ x = 1. 
Otherwise let n > 1 and X be as in (38). For brevity, let A := D[X). 

We will construct a proof of X ■ X~^ = /„ (for /„, the n dimensional identity matrix) from 
the assumptions Xi ■ X^^ = I„y2 and A ■ = /„/2- Using some rearrangements, and the 
definition of A, we have: 



X -x- 



Xi X2\ ( X:[^[I + X2A-^X^X^^) -X^^X2A-^ 
X3 X^ )'{ -A-i^aXf 1 

/ + X2A-^X3X{^ - X2A-^X3X{^ -X2A-^ + X2A-^ 

XsX^^ + (XgXf - X4)A-^X3X{^ i-X3X^^X2 + X4)A-i 

/ 

XgXf ^ - AA~^XsX{^ AA~^ 

I 
/ 

We now argue that this gives a P^"*^ proof with a polynomial number of lines. Let 6{n) denote 
the number of lines in the proof of X ■ X~^ = I, for X an 7i x n dimensional matrix. In the 
proof sequence above we use as premises the proofs of Xi ■ X^^ = I and A ■ A~^ = I. The 
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identity Xi ■ X^^ = I has a proof with 6{n/2) hnes. A ■ A^^ = / is a substitution instance of 
Xi ■ X^^ = I and hence it also has a proof with 6{n/2) hnes (recah that the entries of A are 
algebraicaUy independent, and so the proof is defined under this substitution). From Lemma 27, 
the above proof sequence has number of hnes 6{n) < 2 ■ 6{n/2) + n'^, for some constant c, which 
imphes that 6{n) is polynomial in n. This in turn gives a polynomial-size proof, by Lemma 30. 

Note that it is important that we count the number of proof lines, rather than the size of 
the proof. Since the entries of A have a super-constant size, a direct estimate of the proof size 
would give only a quasipolynomial size proof. 

The proof of X~^ ■ X = I is constructed in a similar fashion. Also, ii X = U for U a matrix 
with entries that are circuits with division, such that is defined, then a similar proof (by 
induction on n) as above holds. And so we obtain a proof of UU~^ = I. QED 



Corollary 32. The identity {XY)~ = X~ has a polynomial- size proof in F~ . 
Lemma 33. 

(i). Let U be an (upper or lower) triangular matrix whose entries are circuits with divisions 
with ui, . . .Un on the diagonal. If u^^ , . . . ,u~^ are defined then 

DET(C/) = ui---Un 

has a polynomial-size proof. 

(a). Let X and Y be n x n matrices, each consisting of pairwise distinct variables. Then 

DET{X ■ Y) = DET(X) • DET(y) (40) 

has a polynomial- size proof. The proof is defined for X = U,Y = V where U, V are 
matrices whose entries are rational functions such that both sides of (40) are defined. 

Proof. Part (i) is proved by induction, following the definition of DET. Let us assume that n 
is a power of two and U is upper triangular. If n = 1, DET([/) = ui by definition. If n > 1, let 

[/ = ^ [/^ ) ' ^^^^^ °^ dimension n/2 x n/2 and C/i, C/4 are upper triangular. 

The definition of DET gives 

DET(C/) = DET([/i • D{U)) = DET([/i ■ {U^ - J/af/f ^0)) 
= DET(C/iC/4) . 

C/1C/4 is an upper-triangular matrix of dimension n/2xn/2 with ui-Un/2+i,U2-Un/2+2j • • • > Un/2'Un 
on the diagonal. Thus, by induction hypothesis we get DET(?7) = ui - ■ ■ Un- 



Part (ii): we will again assume that n is a power of two. We will abbreviate DET(74) as |^|. The 
proof of (40) is constructed again by induction. If n = 1, it is immediate. Assume that n > 1. 
We shall construct a proof of (40), using a constant number of instances of \AB\ = \A\ ■ \B\, 
with A, B of dimension n/2 x n/2. This implies that (40) has a proof with a polynomial number 
of lines, and hence of polynomial-size. Note that part (i) gives \A~^\ = \A\~^ (for n/2 x n/2 
matrices) . 
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Let 



By the definition of DET, \XY\ = \{XiYi + X2Y3)D{XY)\, and we are supposed to prove 

\{XiYi + X2Y3)D{XY)\ = \XiD{X)\ ■ \YiD{Y)\ . 

By induction liypothesis , this is equivalent to \XiYi+X2Y3\-\D{XY)\ = \Xi\-\D{X)\-\Yi\-\D(Y)\, 
and hence, using the rule F ■ = 1 (for any F with F 7^ 0), it is also equivalent to: 

\X^Yi + X2Y3\ ■ iXij-i • = \D{X)\ ■ \D{Y)\ ■ \D{XY)\~^ . (41) 

From Corollary 32, we have (XY)^^ = Y^^X^^. Using the definition of inverse matrix (39), 
and comparing the bottom right block of (XY)'^ and Y'^X'^, we have 

D{XYr^ = D{Yy\l + YsY,~'X^^X2)D{Xr' , 

and, taking the determinant of both sides and rearranging, we obtain 

\D{X)\ • \D{Y)\ • \D{XY)\~^ = \I + YsY,~'X^'X2\ . 

Therefore, in order to prove (41), it is sufficient to prove 

\I + YsY,-^X^^X2\ = 1X1^1 + ^2^31 • l^iT' • mr'. 
This is done as follows: 

i/+y3n~'^r'^2i = mY^^ +Y,-^x~^x2)\ 

Ys\-\Y-^ + Y-^X-^X2\ 
Y^-^ + Y,-^X^^X2\-\Y3\ 
I + Y,-^X^^X2Y3\ 
Y,~^X^\XiYi + X2Ys)\ 
Yi\-^ -iX^r' ■\XiYi+X2Y3\. 

QED 

The following lemma shows that elementary Gaussian operations are well-behaved with re- 
spect to DET. 

Lemma 34. Let X = {xij}ij^[n] be an n x n matrix of distinct variables. Then the following 
have polynomial- size proofs: 

(i). DET(X) = — DET(X'), where X' is a matrix obtained from X by interchanging two rows 
or columns. 

(a). DET(X") = nDET(X), where X" is obtained by multiplying a row or a column in X by 
u, such that is defined. 

(Hi). DET(X) = DET(X'"), where X'" is obtained by adding a row to a different row in X (and 
similarly for columns). 

33 



(iv). DET ^ ^ ^ ^ = nDET(X) where V is a column vector and u ^ is defined. 

(v). DET(X) = (2;„„)-("-2)DET(Z), where Z = {2ij}ije[„_i] is the (n - 1) x (n - 1) matrix 
with Zij — xijXjiyi XfijXifi. 

Proof. Items (ii) and (iii) follow from Lemma 33 and the fact that X" = AX and X'" = A'X, 
where A, A' are suitable triangular matrices. We cannot infer (i) directly from Lemma 33, since 
X' = TX implies only that T is a transposition matrix and hence neither upper nor lower 
triangular. However, we can write T = A1A2A3, where Ai,A2,As are upper or lower triangular 
and DET(yli)DET(A2)DET(^3) = —1. Since X is a matrix of distinct variables, the following 
is defined: 

DET(^i^2^3^) = DET(Ai)DET(A2A3X) = • • • = 
= DET(Ai)DET(y42)DET(yl3)DET(X) . 

For part (iv), construct a lower triangular matrix L and an upper triangular matrix U such 
that X = LU has a polynomial size proof. Clearly, L and U have invertible entries on the 
diagonal. Note that 

X V \ _ f I TO-i \ f L \ f U 
u ) ~ \ 1 ) \ u ) \ I 

The matrices on the right hand side are either lower or upper triangular, and by Lemma 33, 
their determinant is 1, nDET(L) and DET(C/), respectively. Hence 

DET f M = tiDET(L)DET(f/) = 'uDET(L;7) = nDET(X) . 



Z V 
1 

where v is some vector of rational functions. QED 



Part (v) is obtained from (iv), where one first shows that DET(X) = DET 



7.2 The determinant as a polynomial 

Note that we cannot yet apply Theorem 8 to obtain Theorem 3, because DET itself contains 
division gates. For our purpose it will suffice to compute the determinant by a circuit without 
division, denoted det(X), and construct a proof of det(X) = DET(X) in In order to do 

that, we will define det{X) as the nth term of the Taylor expansion of DET(/ + zX) at z = 0, 
as follows: using notation from Section 5.2, let 

det(X) := A^n (DET(/ + zX)) . (42) 

Let us note that 

(i) . det(X) indeed computes the determinant of X, 

(ii) . det(X) is a circuit without divisions of syntactic degree n. 
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This is because every variable from X in the circuit DET(/ + zX) occurs in a product with 
z. Hence A2n(DET(/ + zX)) is the n-th homogeneous part of the determinant of I + X - the 
determinant oiX. By the definition of A^n, A2n(DET(/+zX)) contains exactly one inverse gate, 
namely the inverse of Den(DET(/+zX)) at the point 2 = 0. But a := (Den(DET(/+zX)))(z/0)'' 
is a constant circuit computing a non-zero field element, and we can identify with the field 
constant it computes. 

Lemma 35. Let X he an n x n matrix of distinct variables. Then, the following hold: 
(i). There exist circuits with divisions Pq, . . . ,Pn-i not containing the variable z, such that 

DET(z/ + X) = + + • • • + Po 

has a polynomial- size P~"'^(F) proof. Moreover, this proof is defined for z = 0. 
(ii). There is a polynomial- size proof of 

DET(X) = det(X) . 

Proof. We first show that (i) implies (ii). By (i) we get a polynomial-size P^"*^ proof of the 
following substitution instance: 

DET(z/ + X-^) = z" + + • • • + Qo, (43) 

where the QiS are circuits with divisions that do not contain the variable z. 
By Lemma 33 we have a polynomial-size P~^ proof of 

DET(/ + zX) = DET(z/ + X~^) ■ DET(X), 

from equation (43) we get a polynomial-size proof of 

DET(/ + zX) = z"DET(X) + + • • • + Qo, 

where Q'n-i^ ■ ■ ■ ^Q'o are circuits with division which do not contain z. By (i) and Lemma 33, 
the proof is defined when z = 0. By Lemma 26, we have a polynomial-size P~^ proof of 

A^n(DET(/ + zX)) = A,n(z"DET(X) + z""^Q;_i + • • • + Q'o). 

But by the definition of det(X), A^n(DET(/ + zX)) is det(X) and by the definition of A^n, 
A^n(z"DET(X) + z"-^Qj^„i + • • • + Q'o) is DET(X), and we are done. 

We now prove part (i). Let -F be a circuit in which z does not occur in the scope of any 
inverse gate. Then, we define the z-degree of F, denoted deg^{F), as the syntactic-degree of F 
considered as a circuit computing a univariate polynomial in z (so that all other variables are 
treated as constants). By induction, we will construct matrices ^i, . . . , A„ with the following 
properties: 

L Ai=X + zin, 
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2. Every is an {n — k + 1) x (n — k + 1) matrix of the form 

f 72 . . . 7n-fc+l \ 
Pi 

: Zin-k + Q 
\ Pn-k / 

where all the entries are circuits with division in which z does not occur in the scope of any 
division gate, and moreover: deg^{'yi) < k, for every i € [n — + 1], and pi, . . . ,Pn-k, Q do 
not contain the variable z. 

3. The identity DET(^yfc) = DET{Ai^^i) has a polynomial-size proof. 

4. The entries of Aj. are algebraically independent (this is to guarantee that divisions are de- 
fined). 



Assume that k < n and that we have Ak as in Item 2, and we want to construct A^^i. Let 
us first outline the construction. Displaying only the purported highest powers of z, A^ looks 
like: 



V 



z^ 




^k~l . 




1 


z 


1 


1 


1 


1 


z 


1 


1 


1 


1 


z 



\ 



J 



Here, z^ stands for any circuit of z-degree at most p, and 1 for a circuit not depending on z. 

Let C be the matrix obtained by switching the first and last column of Ak- By Lemma 34, 
we have a polynomial-size proof of DET(ylfc) = — DET(C). The matrix C has the following 
form: 

/ z^~^ z^~^ • • • z^ \ 



fc-1 




^k-l . 


• z^ 


1 


z 


1 


■ 1 


1 


1 


z 


• 1 


z 


1 


1 


• 1 



v 

We can apply part (v) of Lemma 34, to obtain that DET(C) is equal to the determinant of an 
{n — k) X (n — A;)-matrix having the following form: 



V 



k+1 

Z 

z 



z 
z 

1 



1 1 



1 
1 



This matrix is of the desired form, except for the occurrences of z in the first column. This can 
be fixed by appropriate operations on the columns which eliminate the z's while adding to z^~^^ 
only terms of z-degree smaller than k + 1. 
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A more careful implementation of the above argument gives a proof of 



yk+l 



DET(Afc) = DET 



+ 7( 
zqi + p[ 



\ Zqn-k+l + P'r 



n—k—1 



72 • • • 7n-fc \ 

zIn-k-1 + Q' 

J 



where the z-degree of 7^, . . . ,7^_fc is at most k — 1, and the p['s and qiS and Q' do not depend 
on z. If we multiply the last matrix by 



-91 



2n-k+l 



0---0 \ 

In-k-l 

I 



from the right, we obtain that 



DET(Afc) = DET 



/ /3" 



n—k 



7n-fc-l ^ 
zin-k-l + Q' 

I 



where the matrix is of the form required in Item 2, and can be taken as the desired A^+i. 

Finally, A n is a 1 X 1 matrix whose entry is a circuit of the form + li, where u is & circuit 
with z-degree < n in which z is not in the scope of any division gate. This concludes the lemma. 

QED 



8 Concluding the main theorem 

We can now finally prove Theorem 3 (Main Theorem), which we rephrase as follows: 

Proposition 36 (Theorem 3, rephrased). Let X,Y,Z be n x n matrices such that X,Y consist 
of different variables and Z is a triangular matrix with zu, . . . , Znn on the diagonal. Then there 
exist an arithmetic circuit detc and a formula det j such that: 

(i) . The identity detc(-'^^) = detc(-'^) • detc(5^) and detc(.Z') = zw ■ ■ Znn have polynomial- size 

0(log^ n) depth proofs in Pc. 

(ii) . The identity det f{XY) = detf{X) ■ det f{Y) and detj(Z) = zn - ■ ■ Znn have proofs of 

size n^(i°g"). 

Proof. Let det{X) = A2nDET(/ + zX) be the circuit defined in (42). Lemma 35 part (ii) and 
Lemma 33 imply that the equations 

det(Xy) = det(X) • det(y) and det{Z) = zu ■ ■ ■ Znn (44) 

have polynomial-size P~^ proofs. By definition, the syntactic degree of det(X) is at most n. 
Hence, by Theorem 8 the identities in (44) have polynomial-size Pc proofs. This almost concludes 
part (i), except for the bound on the depth. To bound the depth, let 

detc{X) := [det(X)], 
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where [F] is the balancing operator as defined in Section 4. Thus, Theorem 4 imphes that 

[det{XY)] = [det{X) ■ det{Y)] and [det(Z)] = [zn ■ ■ ■ 

have Pc proofs of polynomial-size and depth O(log^n). By means of Lemma 19, we have such 
proofs also for 

[det(X) • det(y)] = [det(X)] • [det(y)] = detc(X) • detc{Y) and [det(Z)] = zn • • • Znn- 

Hence it is sufficient to construct (polynomial-size and O(log^n) depth proofs) of 

[det(XF)] = detc{XY) and [det{Z)] = detc{Z) 

(note that defining detc(-^) as [det(X)] does not imply that [det(Xy)] = detc{XY)). This 
follows from the following more general claim: 

Claim. Let F{xi/gi, . . . ,Xn/gn) be a circuit of size s and syntactic degree d. Then 

[F{xi/gi,. . . , Xn/gn)] = [F{xi, Xn)] {xi/ [gi] ,...,Xn/ [g-n]) 

has a Pc proof of size poly(n, d) and depth 0(log dlog s + log^ d). 

Proof. This follows by induction using Lemma 19. We omit the details. QED 

To prove part (ii), recall Definition 1 of F' . Let detf{X) := {detc{X))* . Then the statement 
follows from part (i) and Claim 1 of the proof of Theorem 21. QED 

We should note that in the Pc-proof of the equation det{XY) = det(X) • det(y) no divisions 
occur and so it is defined for any substitution. In particular, 

det(^X) = det{A) ■ det{X) = adet{X) 

has a short Pc proof for any matrix A of field elements whose determinant is a € F. Similarly, 
the elementary Gaussian operations stated in Lemma 34 carry over to polynomial-size Pc proofs 
of the corresponding properties of det. 

9 Applications 

In this section, we prove Propositions 10 and 11. First, one should show that the cofactor 
expansion of the determinant has short proofs. For an n x n matrix X and i,j G [n], let Xij 
denote the (n — 1) x (n — l)-matrix obtained by removing the ith row and jth column from X. 
Let Adj(X) be the n x n matrix whose (i, j)-th entry is (— l)*"'"''detc(Xj^j) (where detc is the 
circuit from Proposition 36). 

Proposition 37 (Cofactor expansion). Let X = {xij}ij^[n] be an n x n matrix, for variables 
Xij. Then the following identities have polynomial- size 0{log^ n)- depth Pc proofs: 

(i) deic{X) = YJj=i{-'^y'^^ XijdeiciXi^j) , for any i G [n]; 

(ii) X ■ Adj(X) = Adj(X) • X = detc(X) • /. 
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Proof. Let us sketch the proof of 



dete(X) = ^(-l)i+^xi,dete(Xij) . 

It is sufficient to construct a polynomial size proof, for we can then eliminate the division 
gates by means of Theorem 8 and bound the depth of the proof by means of Theorem 4. 
For j S {1, . . . , n}, let Xj be the matrix 

/ ... xij ... \ 

X2l ... X2j ... X2n 



\ ^nl ■ ■ ■ Xnj . . . Xjin / 



Using Lemma 34 part (iv) (applied to detc instead of DET), and some rearr augments, we 
can conclude that detc(Xj) = (— l)^''~-5'xijdetc(^i,j). It is therefore sufficient to prove that 
detc(X) = detc(Xi) + • • • + detc(^n)- This follows from the general identity 

detc ^ ^ = •i'^^c ^ ^ + detc ^ 

where Z is the (n — 1) x n matrix with Zij = Xij and vi,V2 are row vectors. To give a 
proof of this identity is a straightforward application of Proposition 36: one may, e.g., convert 

the matrix ^ ^1+^2 ^ ^ suitable lower triangular form. QED 

Proposition 38 (Proposition 11 restated). The identities YX = I have polynomial- size and 
O {log^ n)- depth Pc proofs from the equations XY = I. In the case of P/, the proofs have 
quasipolynomial-size. 

Proof of Proposition 11. Note that we are dealing with a Pc proof from assumptions, and hence 
we are not allowed to use division gates. The proof is constructed as follows. Assume XY = I. 
By Proposition 36, this gives detc(X) • detc(^) = 1. By Proposition 37, we can multiply from 
left both sides of XY = / by Adj(X) to obtain detc(X) • Y = Adj(X). Hence, 

detc(X) • YX = Adj(X) • X = detc(X) • /, 

and so 

detc(y) • detc(X) • YX = detc(y) • detc(X) • /, 

which, using detc(X) • detc(5^) = 1 gives YX = I. The Pj proof is identical, except that the 
steps involving the determinant require a quasipolynomial size. QED 



Proof of Proposition 10. The proof proceeds via a simulation of the construction in [Val79] (com- 
pare also with the presentation in [HWYIO]). The matrix M is constructed inductively with 
respect to the size of the formula. It is convenient to maintain the property 

Mi,i+i = 1 and Mij = 0, if j > i + 1 . 
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Let us call matrices of this form nearly triangular. Let Mi, M2 be nearly triangular matrices 
of dimensions si x si and S2 x S2, respectively. In order to prove the correctness of the simula- 
tion of Valiant's construction [VaI79], it is sufficient to show that the following equations have 
polynomial-size Pc proofs: 



(i). detc(M) = detc(Mi) • detcCMg), where 

M = 



Ml E 
M2 



and E has 1 in the lower left corner and otherwise. 

(ii). detc(M) = detc(Mi) + detc(M2), with 

/I V ^ 
M=\ Ml vi 

V M2[l] V2 M2[2+], 

where f is a row vector with 1 in the leftmost entry and elsewhere, vi is a column vector 
with 1 in the bottom entry and elsewhere, V2 is a column vector with (— l)'^^"'"^ in the 
bottom entry and elsewhere, M2[l] is the first column of -/Vf2, and M2[2"'"] is the matrix 
M2 without the first column. 

Both parts are an application of Proposition 37. 

QED 
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